- Analyzed closed alerts to replicate the triage and analysis process within the SIEM (LogRhythm), enhancing proficiency in threat detection and response.- Utilized the MITRE ATT&CK framework to deepen understanding of Tactics, Techniques, and Procedures (TTPs), informing the development and refinement of investigation playbooks aligned with MITRE standards.- Generated comprehensive documentation outlining alarm details and investigative findings, facilitating knowledge transfer and enhancing team-wide understanding of identified threats.- Participated in shadowing sessions focusing on endpoint and server monitoring using Endpoint Detection and Response (EDR) tools such as SentinelOne and Microsoft Defender, gaining insights into proactive threat mitigation strategies.- Engaged in shadowing sessions dedicated to incident management within Network Detection and Response (NDR) platforms like LogRhythm NDR, fostering familiarity with incident response protocols and procedures.- Collaborated in shadowing sessions with the Incident Handling team, gaining exposure to real-time incident response workflows.- Participated in shadowing sessions providing exposure to threat intelligence platforms like Recorded Future, monthly threat intelligence reports, reconnaissance assessments, and monitoring of Telegram cybercrime groups and geopolitical intelligence channels.