🛡️ Cybersecurity Analyst | Security Monitoring, Threat Investigation & Incident Response
- Monitor endpoint, network, and cloud environments supporting business-critical services
- Triage and investigate security alerts using SIEM and EDR telemetry
- Correlate signals to determine impact, scope, and response actions
- Perform incident response analysis, containment validation, and post-incident review
- Tune detections to reduce noise and improve response time (MTTD/MTTR)
- SOC & Blue Team Ops: monitoring, investigation & response
- Network & Cloud Security Monitoring with active incident handling
- Detection Engineering & Threat Hunting to improve response readiness
Mission: Improve security visibility and response readiness to keep critical systems available and resilient.
- Detection Engineering Lab
- Focused on tuning investigation accuracy and response readiness
- Investigated simulated security incidents across endpoint, network, and cloud
- Correlated SIEM, EDR, and network telemetry to assess impact and scope
- Validated detections to support effective incident response
- Validated monitoring coverage and response readiness across endpoint, network, and cloud
- SOC Automation
- Automated alert triage and enrichment to support faster investigations
- Streamlined response workflows to reduce manual effort and response time
📫 Reach me: benedictryan80@gmail.com