Cybersecurity Analyst & Cybersecurity Specialist

Erfahrener Sicherheitsingenieur und -analyst mit Fachkenntnissen in Azure Sentinel, Defender XDR und Cloud-Architektur. Bewandert in KQL, Python und Bash, mit fundierten Kenntnissen in Netzwerksicherheitstools wie Wireshark und TCPDump. Nachgewiesene Erfolgsbilanz bei der Verbesserung der Erkennungsgenauigkeit von Bedrohungen und der Reduzierung von Fehlalarmen. Beherrschung mehrerer Sprachen. Ausgeprägte Fähigkeiten als Mentor und in der Schulung, mit Schwerpunkt auf der Verbesserung der Reaktion auf Vorfälle und der Sicherheitslage.

Security Engineer & Analyst 03/2024 - Current • Developed and optimized detection rules for Microsoft Defender XDR and Azure Sentinel using KQL, improving threat detection accuracy and reducing false positives by 60%. • Led high-priority incident response, investigating escalated alerts and reducing overall response time by 29%. • Conducted continuous security analysis and monitoring to proactively identify and mitigate emerging threats. • Created automation scripts to streamline content management and mentored Level 1 analysts to enhance incident response capabilities. • Improved overall security posture and threat detection capabilities.

Security Analyst 09/2023 - 03/2024 • Monitored system logs using Lima Charlie for Endpoint Detection & Response, identifying and mitigating potential threats. • Conducted security assessments, identified vulnerabilities, and implemented proactive mitigation strategies. • Managed and configured firewalls and intrusion detection systems to maintain a secure environment. • Decreased phishing incidents by 20% through targeted training and improved email filtering protocols. • Improved network security by 10% through effective firewall and IDS configuration.

Software Developer, Intern 07/2023 - 09/2023 • Developed and maintained Telegram bots using Python, Git, and SQL to enhance customer service. • Provided technical support to over 60 users, demonstrating strong problem-solving skills. • Created an intuitive front-end interface for a web application using CSS, HTML, and JavaScript. • Increased response time by 80% through the implementation of Telegram bots. • Gained experience in web development and customer service.

Cybersecurity Analyst Lab 9/2024 • Installed and configured Defender XDR for traffic analysis on the victim machine to enhance endpoint detection. • Configured Sliver for the offensive state on the Ubuntu machine and initiated a c2 payload. • Explored Empire’s post-exploitation capabilities to simulate real-world attack scenarios. • Engaged in hands-on cybersecurity exercises to enhance practical skills. • Developed a deeper understanding of cyber attack scenarios and defense strategies.