• Monitor and respond to phishing emails submitted within Office 365 and implemented mail flow rules / created content search deletions to quickly block phishing campaigns• Monitor logins for over 25,000 students, staff, and faculty via Splunk alerts to identify compromised accounts and take appropriate action depending on investigative results• Provide technical support to users with compromised accounts and other security related issues• Worked on development of Splunk SOAR playbooks to automate analysis and containment of suspicious endpoint activity through Sophos and AWS• Used Splunk to create a Correlation Search and Dashboard for Sophos to alert on PUA's (Potentially Unwanted Application)• Created several Splunk Correlation Searches to alert on suspicious AWS activities pertaining to security groups, IAM, and IPs• Collaborated with fellow student assistants to create a Python script that assigns buttons to the previously mentioned alerts to automate certain actions taken such as blocking, suppressing, and sending emails