As a Senior Security Engineer, I specialized in endpoint security, incident response, and vulnerability management. I utilized Endpoint Detection and Response (EDR) tools to conduct live system analyses and monitor network connections, which helped identify and analyze potentially infected endpoints. I researched threat actor techniques to enhance incident response capabilities and developed high-fidelity alerts for various monitoring platforms. Additionally, I created a streamlined assessment program in vulnerability management by automating the ingestion data and enriching scanner results within a Security Information and Event Management (SIEM) platform. I also established a risk analysis metric to track our security posture effectively.

While serving as a Security Analyst, I utilized static and dynamic malware analysis techniques to extract key indicators of compromise (IOC), such as hash values, domain names, and IP addresses, from obfuscated malware samples, enhancing detection rules and informing threat-hunting efforts for Windows and Linux systems. I monitored endpoint activity using EDR tools, Anti-Virus programs, HIPS, and firewalls to detect zero-day threats and suspicious/malicious behavior. Leveraging a SIEM platform, I conducted proactive threat-hunting to identify IOCs and initiated incident response and triage as needed. Additionally, I inspected email firewall traffic to detect malware campaigns and phishing attempts, implementing preventative measures and assisting impacted users in recovery efforts.