At Prism media, I managed secure onboarding and offboarding for remote contractors across Google Workspace, internal tools, and client platforms, applying least-privilege access controls.
I enforced MFA and secure credential-sharing practices using password vaults, and investigated suspicious emails, links, and files to identify phishing, spoofing, and credential-harvesting attempts.
I reviewed administrative logs and cloud activity for unusual login attempts, unauthorized access, and anomalous file transfers. My work also included SOC investigations and hands-on experience with SIEM, Sysmon, Windows Event Logs, network analysis, CyberChef, and IOC investigation.
In my Enterprise Endpoint Detection & Automated Response Lab project, I built a virtualized SIEM/XDR lab with Wazuh and Linux to detect brute-force attacks mapped to MITRE ATT&CK. I tuned authentication-log alerts and automated endpoint containment with Wazuh Active Response scripts.
