Profile
Senior Cybersecurity Analyst with 8 years of experience in threat detection, incident response, and cloud security across financial services and SaaS environments. Specializes in SIEM engineering, vulnerability management, and zero-trust architecture implementation. Reduced mean time to detect (MTTD) by 61% at current employer and led a SOC team that contained a ransomware event with zero data exfiltration.
Work Experience
- Engineered and tuned 140+ Splunk SIEM correlation rules, reducing false-positive alert volume by 38% and cutting analyst triage time by 22 hours per week.
- Led incident response for a targeted ransomware intrusion affecting 3 business units, containing the threat within 4 hours and preventing an estimated $2.1M in potential data-breach costs.
- Designed and rolled out a zero-trust network segmentation framework across 6 AWS VPCs, eliminating lateral movement paths and achieving full CIS Controls v8 Level 2 compliance.
- Managed a Tenable.sc vulnerability program covering 4,200 endpoints, reducing critical open vulnerabilities by 74% within the first 12 months through prioritized remediation sprints with IT ops.
- Built automated threat-intel ingestion pipelines using MISP and Python, cutting manual IOC processing from 6 hours to under 40 minutes per analyst shift.
- Conducted 30+ purple-team exercises aligned to MITRE ATT&CK, directly improving detection coverage from 52% to 81% across Tier 1 SOC playbooks.
- Monitored and triaged 500+ daily security alerts across IBM QRadar SIEM for 18 enterprise clients, maintaining a 99.2% SLA compliance rate over 22 consecutive months.
- Performed forensic analysis on 14 confirmed endpoint compromises using Volatility and Autopsy, producing court-admissible chain-of-custody documentation in 100% of cases.
- Developed an internal phishing simulation program targeting 1,200 employees, reducing click-through rates from 31% to 9% over three quarterly campaigns.