• Received a promotion and award for excellence in threat hunting by identifying the absence of detection rules for a specific MITRE ATT&CK technique under the Exfiltration and Credential Access Tactics. Developed a custom script to simulate the technique and promptly addressed security gaps by creating defenses, which strengthened the organization's overall security posture.• Tuned the "Exfiltration: BigQuery Data Extraction" rule in GCP, reducing false positives that had peaked at… Show more • Received a promotion and award for excellence in threat hunting by identifying the absence of detection rules for a specific MITRE ATT&CK technique under the Exfiltration and Credential Access Tactics. Developed a custom script to simulate the technique and promptly addressed security gaps by creating defenses, which strengthened the organization's overall security posture.• Tuned the "Exfiltration: BigQuery Data Extraction" rule in GCP, reducing false positives that had peaked at over 1,000 per quarter. Identified discrepancies in functionality through attack simulations based on Google documentation, escalated the issue to Google, and facilitated the rule's temporary disablement until a more effective solution was implemented• Automated the validation of bulk suspected user AD accounts in a credential leak case, significantly reducing incident response time. Created a custom Python script to cross-check large volumes of accounts against Azure AD (a feature not natively supported), eliminating invalid accounts and enabling efficient password resets for valid accounts. Show less