IR team SME for deployment and configuration in customer production environments during incident response- endpoint: EPP, EDR - network: IDS, IPS - email security- cloud security- XDR/SIEM (Vision One) Maintain knowledge through threat intelligence to synthesize TTPs of attacks in the wildUtilize XDR/SIEM to hunt critical detections in product logs and network trafficCraft alerts to deliver actionable data to stakeholdersLead containment and remediation effortsUpskill customer team membersProvide forensic after-action report including root cause analysis, malware analysis, recommendations Present findings to executive and technical audience.Articles:Play Ransomware Attack Playbookhttps://www.trendmicro.com/en_us/research/22/i/play-ransomware-s-attack-playbook-unmasks-it-as-another-hive-aff.html

Elevated to IR team after selection processLearned by providing secondary support to senior members during IR engagements

Assist customers securing AWS and Azure production environmentsRecommend architecture and security solutions based on needsTroubleshoot endpoint and network issues to expedite resolution