Deployed, documented, and supported the Wazuh SIEM platform.Analyzed and wrote detection rules for cyber threats using the Wazuh platform.Obtained and identified user input, needs, and requirements from the Wazuh community platforms.Simulated cyber threat actors’ techniques, tactics, and procedures and how they can be detected using the Wazuh platform.Conducted QA tests before version release to ensure the platform ran smoothly and met the testing criteria.Researched and wrote blog posts, documentations, and articles on various use cases of Wazuh in ensuring threat detection, compliance, incident response, and security monitoring.

Maintained email addresses and distribution lists answered SOC phone lines and updated required documentation.Performed security research and gathers information about identified threats and vulnerabilities.Monitored security vulnerabilities to detect its root causes. Conducted security audits, both internal and external.Investigated, validated, and prioritized security alerts. Kept track on all alerts and tickets. Examined security sensors and endpoints for alarms by using tools to identify possible weaknesses on the host, network, and applications before the attacker finds them.Created use case roadmap for the clients and SOC.Found new campaigns and related payloads being used against clients' infrastructure and recommended preventive or detective controls

Working experience with VMware vCenter Server Appliance (vCSA), vCenter Update Manager, vMotion, vCenter High Availability(HA), and cloning.Planned, coordinated, and maintained security systems, installed security software, monitored networks for security breaches, and responded to cyber-attacks.Deployed and utilized cybersecurity tools, Endpoint Detection and Response (EDR) to enhance network security.Configured an Enterprise Mobility Management platform to facilitate the regulated use of BYOD as well as enterprise-provisioned devices Monitoring security patch levels of the servers, workstations, and anti-virus systems.Researched, deployed, and configured SIEMs such as AlienVault and EDRs such as Carbon Black and Cybereason to enhance network security. Deployed and configured an email security system for Google G-suite and Microsoft 365.Incident response/investigation of security incidents with various tools including Carbon Black Defense, Cyber Reason, Sophos EDR, and Alienvault SIEM technology among others. Deployed and monitored an Insider Threat protection system to prevent exfiltration of sensitive company data as well as other use cases

Supported building a Security Operation Center (SOC) by deploying endpoints, virtual, and physical servers.Monitored and identified suspicious or malicious activities within the network.Contributed to monthly security activity report, and Cyber Risk Report for CyberDome Security Operations Center (SOC) as a regular contributing SOC analyst.Researched and implemented ELK stack (Elasticsearch, Logstash, and Kibana) to manipulate and store data, and create interactive dashboards from the data using queries, search criteria, and filters.Created a threat intelligence platform with the ELK stack integrated with Twitter and Pastebin to monitor keywords of interest.Deployed an Asterisk-based Voice Over Internet Protocol (VOIP) telephone system for the company.Set up Wireless Access Point Devices.