At DefenseStorm, I deliver a 24x7x365 co-managed detection and response service for nearly 200 clients, specifically banks and credit unions.
I investigate suspicious network and system behavior using EDR telemetry and behavioral analytics, and correlate logs from cloud services, security tools, and network devices to identify malicious patterns and infrastructure anomalies.
For validated threats, I manage the incident lifecycle, develop containment strategies and remediation plans, and document timelines and resolutions for audits and post-mortems.
I also assist security engineers with SIEM queries using Apache Lucene Query Language and help refine detection logic to reduce alert noise. I completed 40+ hands-on threat hunting and network forensic lab scenarios on TryHackMe’s SOC Level 1 path and am preparing for the CompTIA Security+ certification.
