Sameel

Information Security Consultant | SHIELD53

SHIELD53 • Meio período

Dec 2022 - Present • 3 yrs 10 mos

Conducted comprehensive alert triage and monitoring across Splunk, IBM QRadar, Elastic-SIEM, CrowdStrike, Microsoft Defender, Darktrace, and Microsoft Entra ID to detect, analyze, and prioritize security threats. - Performed alert triage, incident investigations, and detection engineering across Splunk, developing custom rules, correlating events, tuning detections, and escalating high-severity incidents. - Led SIEM engineering tasks including Splunk index creation, agent onboarding and management, troubleshooting ingestion issues, and opening cases with Splunk Support for platform stability. - Conducted vulnerability assessments using Rapid7 Nexpose, delivering actionable reports an- d supporting remediation efforts. - Automated incident response using Splunk SOAR and n8n by building playbooks to enrich alerts and streamline analyst workflows. - Deployed IBM Guardium for data security monitoring and conducted full-scope POC testing.