U.S. Army veteran · security operations
SOC Analyst Incident Response Detection Engineering
I build and document hands-on security operations work across Microsoft Sentinel, Defender, Wazuh, Windows telemetry, and network evidence—combining technical analysis with 12 years of Army leadership.
Case files · 01–03
Three evidence-backed examples of cloud detection, endpoint triage, and network analysis.
Case 01 · SIEM / SOAR
Case 02 · Endpoint DFIR
Case 03 · Network DFIR
Secure development
How three analyst utilities were hardened through threat modeling, regression tests, packaging assurance, evidence governance, and CI/CD.
Network evidence
TShark-validated totals, protected reports, and globally routable unicast filtering before optional VirusTotal requests.
Endpoint evidence
Safe EVTX paths, parser-completeness metadata, validated indicators, and escaped HTML/JSON/CSV output.
Hostile source
Bounded reconstruction without JavaScript execution, 35 focused tests, and 91% core coverage.
Response method
How I scope and document common alert types.
Correlate 4104, 4688, and Sysmon telemetry; review encoded commands, process ancestry, payloads, persistence, and network activity.
Review public-facing application evidence, authentication changes, uploaded files, privilege changes, containment, and patch status.
Connect message source and attachment evidence to Office child processes, scripting engines, dropped files, network traffic, and user impact.
Leadership
12 years in the U.S. Army, including two deployments and Staff Sergeant leadership responsibilities.
Make time-sensitive decisions with incomplete information and prioritize incidents by risk and mission impact.
Communicate across technical and nontechnical teams while maintaining accountability and procedural discipline.
Train personnel, document procedures, and coordinate work across multiple stakeholders.
Field notes
Recent incident investigations, lessons learned, and security research.
Contact
Open to SOC, incident response, and detection engineering roles in Killeen, Texas, including remote and on-site opportunities.
