2024 – Present
Hybrid
Current
Security Engineer
<Redacted>
- Responsible for the security platform and operational security, together with an external SOC partner.
- Investigate and respond to security incidents, from triage to countermeasures; 100+ confirmed incidents handled end to end.
- Implement, operate and extend security solutions across a hybrid environment.
- Integrate new log sources into the SIEM and build and tune detection and analytic rules.
- Automate and optimize alerting workflows to cut noise and improve accuracy.
- Build threat and vulnerability reporting (Sentinel workbooks, exports) for management.
- Provide in-house security consulting and support.
Microsoft SentinelDefender XDREntra IDKQLIncident ResponseSIEM Engineering