Open to opportunities

Richard User

@richarduser10

Message

I’m a SOC Analyst skilled in Splunk and Wazuh, delivering fast triage and incident response across Windows and Linux.

Nigeria

Message

What I'm looking for

I’m looking for a Tier 1 SOC role where I can run alert triage, incident escalation, and playbook-driven response using Splunk/Wazuh, strengthen MITRE ATT&CK detections, and consistently meet SLAs in a fast, high-accountability team.

I’m a Security Operations Center (SOC) Analyst focused on proactive alert monitoring, initial triage, and executing incident response procedures across Windows and Linux environments. I use SIEM platforms including Splunk and Wazuh to analyze security events, correlate logs, and maintain continuous situational awareness, applying the MITRE ATT&CK framework to strengthen threat detection workflows.

Through self-directed labs and projects in Lagos, I’ve improved triage efficiency by building a structured classification workflow (reducing mean alert triage time by ~35%) and delivered consistent SLA adherence in LetsDefend SOC exercises. I document incident details with clear audit trails, generate SOC activity and incident response reports for technical and non-technical stakeholders, and continuously expand my capabilities with training, threat intelligence, and playbook-driven response.

Experience

Work history, roles, and key accomplishments

Current

Security Operations Analyst

Current

Self-Directed Labs & Projects

Jan 2025 - Present (1 year 3 months)

Monitored and analyzed security alerts in Splunk and Wazuh, performing initial triage/classification, executing runbooks/playbooks, and escalating validated threats with complete documentation. Reduced mean alert triage time by ~35% by building a structured workflow using Wazuh rule correlation and MITRE ATT&CK mapping.

Splunk Wazuh Triage And Playbooks Windows Event Logs

Wazuh Infrastructure Monitoring

Self-Directed Labs & Projects

Jan 2026 - Present (3 months)

Deployed and configured centralized Wazuh monitoring for multi-host endpoint visibility and integrated threat intelligence to improve detection of MITRE ATT&CK-aligned indicators. Correlated events across 5 endpoint sources in under 20 minutes to identify a multi-stage network probe attack and reduce false-positive alert volume.

Wazuh Suricata Threat Intelligence Endpoint Visibility System Hardening

System & Network Monitoring

Self-Directed Labs & Projects

Jan 2025 - Present (1 year 3 months)

Configured SIEM-based monitoring to track authentication activity, performance metrics, and security event logs across Windows and Linux endpoints. Deployed an integrated Splunk/Wazuh alert monitoring environment in under 3 days and achieved zero missed anomalies across 15 detection exercises.

Splunk Wazuh SIEM Alerting Wireshark Suricata