Cybersecurity Analyst & Cybersecurity Specialist

Experienced Security Engineer & Analyst with expertise in Azure Sentinel, Defender XDR, and cloud architecture. Skilled in KQL, Python, and Bash, with a strong background in network security tools like Wireshark and TCPDump. Proven track record of improving threat detection accuracy and reducing false positives. Proficient in multiple languages. Strong mentorship and training abilities, with a focus on enhancing incident response and security posture.

Security Engineer & Analyst 03/2024 - Current • Developed and optimized detection rules for Microsoft Defender XDR and Azure Sentinel using KQL, improving threat detection accuracy and reducing false positives by 60%. • Led high-priority incident response, investigating escalated alerts and reducing overall response time by 29%. • Conducted continuous security analysis and monitoring to proactively identify and mitigate emerging threats. • Created automation scripts to streamline content management and mentored Level 1 analysts to enhance incident response capabilities. • Improved overall security posture and threat detection capabilities.

Security Analyst 09/2023 - 03/2024 • Monitored system logs using Lima Charlie for Endpoint Detection & Response, identifying and mitigating potential threats. • Conducted security assessments, identified vulnerabilities, and implemented proactive mitigation strategies. • Managed and configured firewalls and intrusion detection systems to maintain a secure environment. • Decreased phishing incidents by 20% through targeted training and improved email filtering protocols. • Improved network security by 10% through effective firewall and IDS configuration.

Software Developer, Intern 07/2023 - 09/2023 • Developed and maintained Telegram bots using Python, Git, and SQL to enhance customer service. • Provided technical support to over 60 users, demonstrating strong problem-solving skills. • Created an intuitive front-end interface for a web application using CSS, HTML, and JavaScript. • Increased response time by 80% through the implementation of Telegram bots. • Gained experience in web development and customer service.

Cybersecurity Analyst Lab 9/2024 • Installed and configured Defender XDR for traffic analysis on the victim machine to enhance endpoint detection. • Configured Sliver for the offensive state on the Ubuntu machine and initiated a c2 payload. • Explored Empire’s post-exploitation capabilities to simulate real-world attack scenarios. • Engaged in hands-on cybersecurity exercises to enhance practical skills. • Developed a deeper understanding of cyber attack scenarios and defense strategies.