At Digital Web Innovation, I investigate incidents by correlating endpoint, network, cloud, and email security telemetry. I respond using playbooks and SOPs and provide remediation guidance.
I also tune Splunk queries and correlation rules, and create alerts, dashboards, and reports for incident response and continuous monitoring. I use Microsoft Defender for threat detection and investigation, and configure Proofpoint rules to identify phishing, spoofing, and malware.
At Vectra, CA, I monitored security alerts, separated true threats from false positives, and escalated possible intrusions. I documented findings in tickets and helped customer IT teams remediate issues.
I served as a technical escalation point and mentor for lower-level analysts, and worked with customers deploying monitoring systems. My security background includes SIEM, network traffic analysis, Windows and Linux environments, and CompTIA Security+ and Certified Ethical Hacker (CEH) certifications.
