At MAZI SOC LAB, I monitor security event logs and SIEM alerts across managed customer environments, triage incidents, and escalate potential threats. I investigate authentication patterns and network anomalies with Splunk and Wazuh, mapping activity to MITRE ATT&CK.
At DECODELABS, I analyze logs and assess vulnerabilities with Qualys. I also use the Cyber Kill Chain to analyze security events and recommend defensive measures.
My project work includes practicing SOC monitoring and log analysis with Splunk, endpoint security with ManageEngine Endpoint Central, and Wazuh security monitoring. I document investigation findings and remediation steps for review and reporting.

