At Cydea Tech, I developed a production Python service that syncs QRadar offenses and their related data to DFIR-IRIS as cases. I also built Shuffle playbooks that automate containment and response actions for FortiGate, Kaspersky KSC, and CrowdStrike.
I write Wazuh decoders and rules for seven vendors, author ElastAlert2 correlation rules, and operate multi-tenant Wazuh and ELK environments for client teams. I’ve also extended the company’s DFIR-IRIS fork with custom modules for IOC enrichment and automated case creation.
