Open to opportunities

Trevor C

@trevorc

Message

I lead SOC investigations and automate cloud security response workflows.

United States

Message

What I'm looking for

I'm looking to lead and improve security operations through incident response, cloud security monitoring, threat hunting, and AI-assisted investigation automation while partnering closely with infrastructure, identity, and security teams.

At Charter Communications, I lead Security Analysts responding to enterprise security incidents across cloud environments, endpoints, networks, and identity systems.

I've engineered 10+ AI-powered investigation skills with Kiro across AWS, GCP, CrowdStrike, and Microsoft Defender, cutting AWS and GCP alert investigation time by approximately 50%. I handle complex escalations involving phishing, malware, unauthorized access, account compromise, APTs, and compromised servers.

I've progressed from IT SOC Incident Commander to Tier I and Tier II Security Analyst, coordinating major incidents and building clear playbooks, runbooks, incident timelines, and leadership updates. I use Splunk, CrowdStrike Falcon, threat intelligence, and MITRE ATT&CK-aligned methods to strengthen detection and response.

Experience

Work history, roles, and key accomplishments

Current

Security Analyst – Tier II

Current

Charter Communications

Jul 2024 - Present (2 years 2 months)

Engineered AI-powered investigation skills using Kiro to automate case reviews, reducing AWS and GCP alert investigation time by approximately 50%. Lead a team of Security Analysts in monitoring, investigating, and responding to security events across enterprise platforms, cloud environments, endpoints, and networks.

Amazon Kiro AWS GCP CrowdStrike Falcon Cloud Security Microsoft Defender MITRE ATT&CK Incident Triage Containment remediation Threat Intelligence Threat Hunting SOPs Playbooks Run Books APT Investigation Cross Functional Collaboration

Security Analyst – Tier I

Charter Communications

Dec 2021 - Jul 2024 (2 years 7 months)

Monitored and investigated security alerts using Splunk Enterprise Security, CrowdStrike Falcon, Cisco Palo Alto, AWS GuardDuty, and Microsoft Defender. Analyzed UBA/UEBA data and supported vulnerability management using OSINT tools.

Splunk Enterprise Security CrowdStrike Falcon Cloud Security Cisco Palo Alto AWS Microsoft Defender UEBA Virus Total URLScan.Io AbuseIPDB Swimlane SOAR Incident Documentation Vulnerability Management

IT SOC Incident Commander

Charter Communications

Jul 2019 - Dec 2021 (2 years 5 months)

Coordinated major incident response across networking, security, server, and application teams, managing concurrent workstreams and driving timely resolution. Communicated incident status to senior leadership and completed BlackRock3 Incident Command Training.

Incident Command Major Incident Management Communication Skills Alert Triage System health monitoring BlackRock3

IT Specialist

U.S. Department of Agriculture

Jan 2019 - Jul 2019 (6 months)

Managed Active Directory user accounts and supported identity and access management across a Windows enterprise environment. Troubleshot network issues and maintained detailed records in the Remedy ticketing system.

Active Directory IAM Windows VPN Network Troubleshooting Remedy Asset Management