Skills

Tools, platforms, and techniques

Grouped by expertise area — the tools and platforms I work with, how I use each, and where I've applied it.

Security Operations

Security MonitoringAlert TriageIncident InvestigationIncident ResponseThreat DetectionThreat HuntingContainment and RemediationDetection Tuning and Correlation RulesLog AnalysisSecurity Reporting

SIEM and EDR

Microsoft Sentinel

Monitored and investigated security alerts, wrote KQL detection queries, and escalated confirmed incidents.

SOC Analyst, Hackup Technology

KQL

Developed detection queries, hunted across logs, and automated repetitive SOC tasks.

SOC Analyst, Hackup Technology

CrowdStrike Falcon

Conducted endpoint investigations, contained threats, and supported timely remediation.

SOC Analyst, Hackup Technology

Microsoft Sentinel (KQL)SplunkCrowdStrike Falcon (EDR)Microsoft DefenderEndpoint SecurityIDS/IPS and AV Log Analysis

Vulnerability Management, Email Security and Networking

Microsoft EOP

Investigated phishing emails and validated indicators during email-threat triage.

SOC Analyst, Hackup Technology

Qualys

Performed vulnerability assessments and validated remediation activities.

SOC Analyst, Hackup TechnologyProject

Wireshark

Analysed suspicious network traffic as part of investigations.

SOC Analyst, Hackup Technology

Vulnerability Management and Remediation (Qualys, Nessus)Email Security and Phishing Analysis (Microsoft EOP)Network Traffic Analysis (Wireshark)TCP/IPDNSFirewall ConceptsWindows and Linux

Threat Intelligence and Analysis

VirusTotal

Validated IOCs and enriched investigations with reputation and detection context.

SOC Analyst, Hackup Technology · enrichment provider in SeCPoDProject

Any.Run

Enriched phishing and malware investigations by observing sample behaviour.

SOC Analyst, Hackup Technology

AbuseIPDB

Checked IP reputation while validating IOCs during investigations.

SOC Analyst, Hackup Technology

MITRE ATT&CK

Mapped detections to ATT&CK techniques to structure investigation and coverage.

SeCPoD platformProject

Threat Intelligence and Enrichment (VirusTotal, AbuseIPDB, Any.Run)IOC AnalysisPhishing and Malware AnalysisHost and Network Forensics

Scripting and Frameworks

Python

Automated repetitive SOC tasks and built security tools end to end.

SOC Analyst, Hackup Technology · the language behind all three projectsProject

PowerShell

Automated repetitive SOC tasks and used it for Windows endpoint control.

SOC Analyst, Hackup Technology · USB HID security control projectProject

Bash

Automated repetitive SOC tasks to improve operational efficiency.

SOC Analyst, Hackup Technology

Jira

Managed incidents and tracked investigation work.

SOC Analyst, Hackup Technology

ServiceNow

Managed incidents and coordinated resolution with IT teams.

SOC Analyst, Hackup Technology

PythonPowerShellBashSQLNIST Incident Response LifecycleCyber Kill ChainJiraServiceNow (Ticketing and ITSM)