At Security HQ, I onboard customers to Azure Sentinel and configure data connectors for Azure, on-premises, and third-party sources. I create KQL-based analytics rules and develop custom parsers for non-standard devices.
I also manage QRadar deployments, including custom DSM development, event collectors, and WinCollect installations and upgrades. I integrate endpoint security products with SIEM platforms and troubleshoot log ingestion and parsing issues.
In security operations, I analyze critical security logs to assist with incident containment and threat detection, and perform daily health checks across Sentinel, QRadar, and log collectors. I hold Microsoft Security Operations Analyst Associate and Azure Security Engineer Associate certifications.
