About

I am a Cyber Defense Analyst focused on security operations, incident investigation, threat hunting, detection improvement, and evidence-based response. My work involves correlating telemetry from SIEM, EDR/XDR, identity, cloud, network, firewall, and WAF sources to understand suspicious activity and improve defensive coverage.

I also explore security automation with Python, PowerShell, Bash, and LLM-assisted workflows. My offensive security research in web applications, APIs, Linux, and Active Directory complements my defensive work by helping me understand attack paths and identify opportunities for better detection.