Evan Obal
Evan Obal

Cybersecurity Security Consultant

Open to offers · Member since 20 Oct 2026
Location
Chicago, United States
Desired salary
Unspecified
Work preference
Remote Only
Experience level
Senior

About

Professional summary

I am a cybersecurity professional with more than five years of experience in threat detection, incident response, security operations, and security automation.

I currently work in Cyber Threat Security Operations at NielsenIQ, where I design SOAR automations, integrations, and data-enrichment workflows using D3 Security and BlinkOps.

I specialize in improving analyst investigations and incident response by connecting security platforms such as Microsoft Defender, Entra ID, Wiz, Zscaler, and Vulcan through REST API integrations and automated playbooks.

I have hands-on experience investigating and triaging alerts from MDR providers, phishing pipelines, threat intelligence feeds, SIEM, EDR, NGIPS, and antivirus platforms. I also support threat intelligence operations through agentic workflows and AI-driven enrichment.

My technical background includes Python, KQL, regular expressions, REST APIs, Microsoft Sentinel, Azure, Power BI, and a broad range of security tooling. I hold certifications including GIAC Machine Learning Engineer, CompTIA CySA+, and Microsoft security certifications.

I am focused on building scalable, measurable security operations capabilities that reduce response times, improve investigation quality, and provide leadership with actionable operational metrics.

Skills

22 capabilities

Tech stack & tools

Working toolkit

Application Utilities

Experience

Career history

Security Consultant / Sr. Security Analyst - Cyber Threat Security Operations Team NielsenIQ

Design and build SOAR automations on the D3 Security platform to accelerate analyst investigations and reduce mean time to respond for security incidents. Architect and implement integrations with Microsoft Defender, Entra ID, Wiz, Zscaler, and Vulcan to enable automated enrichment and response actions.

Own the Threat Intelligence workstream in BlinkOps, developing agentic workflows and AI agents that hunt and enrich observables with environmental data. Investigate and triage alerts from MDR providers, phishing submissions, CISA intelligence feeds, and user escalations.

Engineered an automated incident-volume and time-spent metrics pipeline using Azure Blob Storage and Power BI for leadership reporting. Collaborate with SOC stakeholders to identify workflow bottlenecks and translate operational requirements into automated playbooks.

Sr. Security Analyst / Threat Response Analyst Ascend Technologies

Owned escalated incident tickets and acted as a bridge between client teams and legal stakeholders when incidents expanded in scope. Optimized SIEM analytic rules and alert exclusions to improve SOC efficiency and reduce false-positive volume.

Triaged and investigated alerts across SIEM, EDR, NGIPS, and antivirus platforms for managed services clients. Performed client risk assessments using vulnerability-scanning tools and contributed to measurable security posture improvements.

Administered Microsoft Azure tenants for diverse clients, including identity, access, and cloud security configurations. Supported managed service operations through backup analyst coverage and documentation of alert-response procedures.

Education

Learning history

DePaul University

Bachelor of Science, Cyber Security, Minor in Computer Science

Graduated Cum Laude with a 3.6/4.0 GPA and was an Honors Program member. Relevant coursework included Security Testing and Assessment, Cyber Defense Exercise and Attack Response, Computer Forensic Incident Response, Applied Networks and Security, and Critical Infrastructure.

This professional hasn’t added portfolio projects yet.

This professional hasn’t listed any services yet.

Jobs Talent AI Tools Salaries
Menu