Rickey Alaniz

I am a security operations professional focused on 24/7 alert triage and incident response within multi‑tenant MSP environments. I specialize in Microsoft Defender XDR/M365 Defender, Entra ID Conditional Access/MFA, and Sophos EDR/XDR.

At Stock Technologies I lead triage and end‑to‑end investigations by correlating endpoint telemetry, Entra ID sign‑ins, and M365 audit logs to document timelines, attack paths, and remediation steps. I improved tenant security posture by implementing Conditional Access and MFA baselines, raising Secure Score from 48.62% to 83.36%.

I mentor client administrators on remediation and hardening mapped to MITRE ATT&CK, develop KQL queries, and use Sysmon/Windows Event Logs and PowerShell for threat hunting and enrichment. I also investigate phishing and BEC incidents, analyze IOCs and email headers, and provide clear user guidance.

I bring earlier experience providing high‑volume technical support for macOS and iOS at Apple and hold a B.S. in Cybersecurity and Information Assurance plus multiple security certifications. I am collaborative, documentation‑focused, and committed to continuous improvement of MXDR services.