At RSMUSLLP, I investigate security alerts across endpoint, network, and cloud telemetry using Torq, Stellar Cyber SIEM, and SentinelOne. I handle incidents from triage through containment, remediation, and root cause analysis.
I use Intezer AI-powered sandboxing and automation to speed up incident triage and reduce manual investigation time. I also hunt for suspicious activity using threat intelligence and behavioral analysis.
At Port53, I monitored and responded to incidents using SIEM and XDR platforms, Microsoft 365 Defender, and Azure AD / Entra ID. I also prepared incident reports and executive briefings and maintained security procedures and policies.
At NetsurionTechnologies, I installed, configured, and supported EventTracker SIEM for customers. I also assisted clients with integrating Microsoft Office 365, SentinelOne, CrowdStrike, and Barracuda Firewall log sources into the platform.
