Security stack & operational capabilities.

Hands-on experience across SIEM, SOAR, EDR/XDR, incident response, network security, threat hunting and SOC delivery.

SIEM & ANALYTICS

Splunk ESMicrosoft SentinelHP ArcSightWazuhGurucul

ENDPOINT / XDR

Trend Micro Vision OneCortex XDRCrowdStrikeSentinelOneApex One

INCIDENT RESPONSE

Malware AnalysisPhishing / BECIOC SweepsRCAThreat Hunting

SOAR & AUTOMATION

Splunk PhantomSOAR WorkflowsPlaybooksResponse AutomationServiceNowClient Reporting

NETWORK SECURITY

Palo AltoFortiGateIDS / IPSTippingPointFirewall Analysis

SOC OPERATIONS

MITRE ATT&CKSOC L1/L2/L3SLA Management

GIACGCIH

CERTIFICATION

Incident handling, attacker techniques, detection, containment, response and remediation.

Incident HandlingAttack TechniquesDetectionResponse

CERT / GCIH