Skills
SIEM & Monitoring
SIEM (Splunk, Siemplify, Elastic Kibana)Threat Detection & Use Case DevelopmentLog Analysis & CorrelationCyber Threat Intelligence MonitoringAlert Triage and AnalysisThreat HuntingSIEM MonitoringEDR/XDR AnalysisSource CorrelationDetection Rule TuningSplunkMicrosoft SentinelElastic SecurityCrowdStrike FalconMicrosoft Defender XDRPalo Alto Cortex XDRGoogle Security Operations
Incident Response
Alert Triage & Incident ResponseIOC Analysis & Threat CorrelationIncident ResponseSecurity Incident InvestigationDigital ForensicsThreat AssessmentIncident Playbook Development
GRC & Compliance
Vulnerability Scanning (Nessus, Qualys)Risk Assessment & RemediationSecurity Frameworks (SOC 2, NIST, ISO 27001)Audit & Compliance SupportData Loss PreventionQualys VMDRTenable Vulnerability ManagementMicrosoft Purview DLPNIST Cybersecurity FrameworkVulnerability Management
Network Security
EDR/XDR (CrowdStrike, Microsoft Defender for Endpoint, Carbon Black)NGAV, IDS/IPSSecurity Control Implementation & HardeningEmail Security & DLP SolutionsData Loss Prevention (DLP)Endpoint Protection
Scripting & Automation
SOAR & Automation (Playbooks, Runbooks, SOP)
Offensive Security
Threat Hunting & MITRE ATT&CK Framework
Cloud Security
Microsoft Azure Security (Defender for Cloud, Sentinel)AWS SecurityCloud Monitoring & Threat Detection
Other
Threat IntelligenceMITRE ATT&CKServiceNowRecorded FutureVirusTotal