Lead member of Incident Response CSIRT team.Developed Incident Response policies and procedures.Threat hunting using various EDR, NDR, and SIEM products.Triaging alerts from various EDR, NDR, and SIEM products.Developed Threat Hunting program with policies and procedures.Gathering and implementing threat intelligence from various sources (H-ISAC, MISP, RecordedFuture, etc)Offensive security research to develop threat models and determine risk for emerging threats. Adversary Emulation and Simulation to validate security controls.Engineering and maintaining SIEM solutions and their component. Developed custom scripts to interact with API’s to automate processes.