At Samba Bank, I coordinate monitoring of IBM QRadar and IBM Guardium alerts for incident triage, and support remediation through incident analysis and documentation. I also led the integration of IBM Guardium with enterprise systems for database activity monitoring and centralized security visibility.
At EE, I drove KQL hunts and detection tuning mapped to MITRE ATT&CK, and owned Python and Logic Apps enrichment automation. I also built a phishing response playbook using Microsoft Defender, Microsoft Graph API, and Teams, and developed a Python framework for log and network traffic analysis.
