At BRILLIO, I investigate enterprise security alerts and incidents using Microsoft Sentinel and Defender, including phishing, BEC, account takeover, and suspicious sign-ins. I also provide detection-engineering recommendations to improve Microsoft and CrowdStrike security coverage.
At BUCHANAN TECHNOLOGIES, I conducted threat hunting and security analysis across endpoint, network, cloud, identity, and email environments. I designed and maintained SIEM correlation rules and detection use cases, and tuned alerts to improve alert quality.
Across these SOC roles, I've created investigation procedures, runbooks, and incident playbooks, and mentored security analysts. My experience also includes incident response, endpoint containment and remediation, and applying MITRE ATT&CK to map adversary behavior.
