Triage Security Engineer

My time as a Triage Security Engineer built the operational foundation that shapes how I lead SOC teams today — triaging and documenting over 500 security incidents, developing runbooks that standardized how the team investigated alerts, and collaborating with the threat intelligence team to translate IOCs and TTPs into actionable response playbooks. I learned early that consistent process and clear documentation are what allow a SOC to perform at scale.

• →
  Expertly triaged and responded to security alerts, ensuring rapid resolution and minimal impact.
• →
  Used MITRE ATT&CK framework for incident investigation.
• →
  Developed and refined new runbooks for consistency among employees.
• →
  Investigated and documented over 500 security incidents, developing expertise in threat analysis and incident response procedures.
• →
  Created custom Sigma rules for detection of emerging threats, improving early warning capabilities for the security operations team.
• →
  Performed deep-dive forensic analysis on compromised endpoints using EDR tools and log analysis techniques.
• →
  Collaborated with threat intelligence team to incorporate IOCs and TTPs into detection and response playbooks.
• →
  Trained new analysts on alert triage methodology and investigation techniques, accelerating their proficiency.
• →
  Identified and reported process improvement opportunities that reduced average incident response time by 20%.