At KLDiscovery, I monitor and investigate security events across multiple log sources using Splunk Enterprise Security, Azure Sentinel, and Arctic Wolf. I create and fine-tune SIEM filters, queries, dashboards, and reports to improve detection accuracy and reduce false positives.
I triage security alerts and incidents, handle Microsoft Defender alerts and PagerDuty on-call incidents, and manage security tickets in Remedy. I also support endpoint, web, data, and identity security using tools including Trellix ePO, Microsoft Intune, Skyhigh Security Web Gateway, and Microsoft Entra ID.
