Open to opportunities

Zander User

@zanderuser

Threat Engineer at Snode Technologies refining Guardian detection logic and coordinating authorised phishing and AiTM assessments.

South Africa

Message

What I'm looking for

I’m open to cybersecurity opportunities in South Africa and international remote roles.

At Snode Technologies, I monitor and investigate security alerts across Cortex XSIAM and connected platforms, and refine detection logic in the Guardian/Snode environment to improve detection quality and reduce unnecessary alert noise.

I review Microsoft Entra identity alerts and risky-user activity, and collaborate with SOC analysts on threat hunting and event validation. I also support phishing and email-security reviews using Mimecast and Microsoft Defender.

I independently design and coordinate authorised phishing and adversary-in-the-middle assessments, and deliver cybersecurity awareness training, including in Namibia. I’m CompTIA Security+ and CySA+ certified.

Experience

Work history, roles, and key accomplishments

Current

Threat Engineer

Current

Snode Technologies

Sep 2025 - Present (1 year 1 month)

Responsible for threat engineering and security service delivery for a multinational client. Monitors and investigates security alerts, conducts threat hunting, refines detection logic, and coordinates phishing and AiTM assessments.

XSIAM Microsoft Defender Microsoft Entra Mimecast Darktrace Tenable Nessus Lansweeper UpGuard Threat Hunting Detection Engineering SOC Operations Phishing Tests AiTM Assessments Cyber Security Awareness

L3 SOC Analyst

Snode Technologies

Mar 2023 - Aug 2025 (2 years 5 months)

Supported cybersecurity service delivery and reporting across three client accounts. Performed advanced alert investigation, threat hunting, and security-event validation, and contributed to detection refinement and client reporting.

Alert Investigations Threat Hunting Security Validation Detection Tuning Client Reporting Cybersecurity Presentations Phishing Tests AiTM Assessments Cyber Security Awareness

L2 SOC Analyst

Snode Technologies

Oct 2021 - Feb 2023 (1 year 4 months)

Investigated and triaged security alerts, supported case handling, and escalated confirmed or complex activity. Supported threat hunting, alert validation, phishing/email security reviews, and recurring operational reporting.

Security Alerts Triage Case Handling Escalation Management Threat Hunting AI Alert Validation Phishing Review Email Security Operational Reporting

L1 SOC Analyst

Snode Technologies

Jun 2020 - Sep 2021 (1 year 3 months)

Monitored security alerts and events, performed initial triage, and followed established SOC procedures. Documented findings, escalated suspicious activity, and supported case tracking and follow-up.

Security Monitoring Alert Triage SOC Procedures Documentation Escalation Management Case Tracking