Cybersecurity Engineer | Vulnerability Management & GRC

Designed, developed, and tuned threat detection logic, correlation rules, and alerting thresholds across cloud and on-premises environments. Built log-ingestion processes by onboarding endpoint, identity, cloud, application, and infrastructure telemetry into Microsoft Sentinel and Splunk.

Developed KQL, SPL, and SQL queries for event analysis, threat hunting, and investigations. Integrated telemetry from CrowdStrike Falcon, Microsoft Defender, AWS CloudTrail, GuardDuty, Windows Event Logs, Linux Syslogs, and Active Directory; automated validation and reporting with Python and PowerShell; mapped coverage to MITRE ATT&CK; and produced detection playbooks and SOC procedures.

Developed enterprise security detections, SIEM correlation searches, and alerting logic to improve detection coverage and incident response. Built SPL, SQL, and log analytics queries to investigate endpoint, network, cloud, identity, and application security events in Splunk.

Integrated telemetry from AWS GuardDuty, CloudTrail, Tenable, ServiceNow, Windows, Linux, and Active Directory into centralized monitoring platforms. Collaborated with SOC, incident response, cloud, infrastructure, and engineering teams; tuned alerts to reduce false positives; automated monitoring tasks with Python; and supported Docker and Kubernetes security monitoring.

Supported GRC initiatives and audit preparation for PCI DSS and ISO 27001, managing audit evidence, mapping business processes, and establishing security policies. Developed access-control policies, compliance metrics, dashboards, governance questionnaires, and reporting frameworks aligned with NIST and PCI-DSS.

Used Python and SQL to analyze vulnerability and security-event data, automate reporting, and prioritize remediation. Led DLP planning and large-scale deployments, improved threat detection through advanced analytics and EDR, developed disaster recovery and business continuity plans, authored after-action reports, and delivered end-user compliance training.

Performed security assessments and documented compliance across Windows and Unix platforms. Conducted vulnerability assessments using Qualys, Nessus, and Rapid7, analyzed findings, determined remediation options, reduced false positives, and produced scan reports for customers and stakeholders.

Provided technical support and deployment assistance for Symantec Endpoint Protection. Monitored network and host IDS/IPS systems and firewalls, used SIEM tools for log analysis and threat management, maintained vulnerability management processes and security documentation, and coordinated remediation activities through closure.

Master of Science in Computer Information Systems.

Bachelor of Engineering in Civil Engineering.