SecOps Incident Response

Front-line response to 200+ incidents across 300+ client organizations — business email compromise, account takeovers, malware, phishing and vishing, browser hijacking — with a 1–3 minute average to full mitigation using SentinelOne, Wazuh, OpenCTI, and Microsoft Entra.

At that volume the work is as much triage discipline as tooling: deciding fast what is noise, what is a single compromised mailbox, and what is a tenant-wide problem, then containing it before the attacker finishes what they started.