Operated within a Security Operations Center (SOC) to investigate alerts in Splunk Security Information Event Management and Microsoft Defender, identified gaps in alert detection, and created documentation libraries.Configured and debugged Security Orchestration, Automation, and Response (SOAR) playbooks for data collection and investigations using Python.Worked with a Managed Security Service Provider to build new correlation searches, alerts, and response activities.Correlated firewall, network traffic, and system logs to analyze events that occurred within an Office 365 environment.Collaborated with users and senior management to teach basic security principles and discuss opportunities for security awareness after incidents.

Provided excellent customer service while diagnosing and resolving end-user hardware and software incidents and requests. Executed scripts on user endpoints to gain network statistics and install additional software. Effectively communicated with non-technical and technical users to analyze, diagnose, troubleshoot, and resolve technical issues in a timely manner.Monitored the support ticket system and coordinated communication between users and IT Operations.Documented resolutions to assist with knowledge transfer and escalated issues as needed.

Assisted IT in formulating responses to security incidents or exposures.Provided reports to be used for decision-making concerning Information Security best practices.Maintained an understanding of standards and compliance regulations that directly impacted the company.

Implemented advanced event monitoring using Microsoft Sysmon, helped create runbook processes for security incidents, and monitored a database of users for security awareness training.In-depth research into Information Security topics including: phishing, data loss prevention, secure development life cycle, compliance, and incident response. Involved in implementing new security measures and changing existing process after a third-party penetration testing exercise.