Network Architect
Current- 2021 - Present(updated 2024): Cybersecurity Transformation
- Deployed EDR endpoint system for enhanced defense posture and incident investigation. Conduct root cause analysis during incident response to fine-tune endpoint policies.
- Engaged SOC/MDR vendor to enhance our internal team and for more rapid incident response.
- Implemented segmentation at various levels to minimize lateral movement. Strict internet access on servers. Strengthened Azure environment with strict traffic controls and least privilege design.
- Proactively hunt threats using EDR SQL queries, packet traces, logs, etc.
- Streamlined applications and reduced attack surface on endpoints. Enhanced visibility by reducing noise in logs and EDR queries.