Perform cyber security services assessments and transformations for clients. Coordinated content migration from Splunk to Humio for SOC of a large corporation from the food and beverage industry. Create detection rules, alerts, dashboards and integrations in various security platforms (SIEMs, EDRs). Propose test and implement detection scenarios for SOC. Perform cloud SOC detection and monitoring service transformation. Integrated MCAS into Splunk Enterprise Security using risk based analysis.

Started threat hunting as a new service in SOC to improve threat landscape coverage. Performed hunts based on TI team input and known emerging threat indicators. Transformed hunt results into detections and provided reporting.

Actively participate in establishing security monitoring and defense service for the corporation. Made significant contributions to architecture and design of Splunk SIEM, developed processes and procedures organizing operations of SOC. Maintained, administered and enhanced tools and services that our service is based on. Participated in developing a framework to categorize and score various detection mechanisms based on the threat landscape and MITRE. Created and maintained Azure cloud lab environment for SOC.

Tier 2 SOC security analyst handling incidents/alerts escalated from Tier 1, performing triage to select true positive security incidents for investigation and resolution. Create and update operating procedures and detection rules to improve security service performance. Performing service reviews and work directly with clients to fix outstanding issues and introduce enhancements.

2nd line support engineer in for UK&I customers. Hands on experience with variety of network security vendors and technologies (Cisco, Juniper, Check Point, Fortinet..) Resolving network/security incidents and performing changes to the infrastructure

Seismic equipment maintenance, testing and setup. Installing and setting up Linux based operating systems for seismic recording equipment.. Troubleshooting and providing support for IT equipement and setting up IT network on base camps. Participating in new technology and methodology testing and implementation.

Oracle Solaris 10 and Apache – Tomcat security hardening tool development (shell scripting), Developing ASP.NET web application for code quality metric calculation and Perl scripts to aid in testing.