At NETOPIA, I monitor security operations, investigate critical incidents, and hunt threats using SIEM and EDR telemetry. I improve MITRE ATT&CK detection coverage and develop and tune Sigma rules and YARA signatures to reduce false positives.
I automate SOC workflows with Python and AI, including IoC enrichment and alert analysis, and contribute to SOAR playbooks and vulnerability advisories. At LMPS GROUP, I monitored SIEM/EDR alerts, enriched threat intelligence, and wrote Python scripts for vulnerability intelligence bulletins.
My projects include a Detection-as-Code platform with CI/CD validation and rollback, and a SIEM and Threat Intelligence Platform using ELK, Wazuh, Snort, Suricata, OpenCTI, and Python. I also earned 3rd Place in the Sekera CTF Hackathon and contributed open-source threat intelligence through FST Cybersecurity Club.
