Open to opportunities

Timothy Wilson

@timothywilson

Message

Detail-oriented SOC security analyst experienced in SIEM monitoring, incident triage, and threat detection.

United States

Message

What I'm looking for

I seek a hands-on SOC or IR role where I can apply SIEM expertise, perform incident triage and enrichment, contribute to detection tuning, and grow into advanced threat-hunting responsibilities.

I am a detail-oriented security professional with hands-on SOC monitoring experience across Splunk and Elastic, complemented by packet analysis and Windows/Linux architecture knowledge. I have performed continuous alert triage, enrichment using VirusTotal and OSINT, documented findings in ServiceNow, and escalated confirmed incidents following SOC runbooks.

I built a home SIEM lab integrating Sysmon, Winlogbeat, Zeek and custom SPL searches, completed Hack The Box AD penetration and IR labs, and supported SIEM tuning and incident response for global environments. I am pursuing an AAS in Cybersecurity and certifications including CompTIA Security+ while expanding skills in AWS security and network fundamentals.

Experience

Work history, roles, and key accomplishments

Security Operations Analyst

SAS Institute

Jan 2012 - Sep 2016 (4 years 8 months)

Monitored global security dashboards and SIEM alerts, analyzed Windows/Linux and network logs to investigate phishing and unauthorized access, and supported incident response and SIEM tuning to improve detection fidelity.

SIEM Log Analysis Windows Linux Phishing Incident Response SIEM Tuning

Security Operations Analyst

Cisco Systems

Jan 2005 - Dec 2011 (6 years 11 months)

Conducted continuous SIEM monitoring across Splunk and Elastic, triaged and enriched alerts, documented findings in ServiceNow, and escalated confirmed incidents with detailed evidence to reduce incident response time.