Mujtaba User

At PNC Financial Services, I investigated 500+ security alerts across Microsoft Defender, Splunk, and Sentinel, identifying 50+ confirmed incidents and leading response for malware, phishing, and unauthorized-access events.

I've hunted threats across endpoint, network, and cloud environments, completed vulnerability assessments on 2,000+ assets, and partnered with infrastructure teams to remediate critical findings. I also built RBAC models for 5,000+ users, automated JML workflows for 10,000+ accounts, and improved access governance through SailPoint, Active Directory, Azure AD, Okta, and ServiceNow.

Outside enterprise work, I build SOC labs in Azure and AWS, using Microsoft Sentinel, Security Onion, CloudTrail, Security Hub, Suricata, Zeek, Kibana, Elasticsearch, and Lambda to validate detection and response processes.