Experience

1. 2023 — Mar 2026

   SOC Analyst

   Northern Technologies Group (NTG) — Managed Security Service Provider

   • Authored and drove adoption of a BloodHound CE / AzureHound CE Quarterly Identity Attack Path Review program across 20+ client tenants, cutting the monthly privileged-account audit review from a full week to a single day.
   • Built custom KQL detection rules in Microsoft Sentinel mapped to MITRE ATT&CK, covering credential stuffing, brute-force patterns, lateral movement, authentication bypasses/config changes, and ACL/permission abuse.
   • Investigated Microsoft 365 and Entra ID abuse across 20+ client tenants, including privileged role misuse, delegated permission exploitation, sign-in anomalies, and over-privileged accounts, and delivered formal remediation guidance.
   • Proposed and designed a Kasm Workspaces malware detonation sandbox, approved by SOC management, for isolated dynamic analysis of suspicious files and URLs.
   • Performed static and dynamic malware analysis (FLARE VM, Ghidra, sandbox detonation) to extract IOCs, map TTPs, and produce detection logic from real samples.
   • Engineered Python automation for EDR compliance gap analysis across FortiEDR and Halcyon EDR, surfacing endpoint coverage blind spots across 20+ tenants that would otherwise require manual auditing.
   • Triaged and investigated alerts across a 24x7 multi-tenant SOC, consistently meeting a required minimum of 20 alerts triaged per tool, per shift, across Sentinel, Splunk, FortiEDR, Halcyon EDR, and FortiMail.
   • Authored additional internal security proposals adopted by SOC management, including a centralized phishing mailbox standardizing analyst triage across all managed tenants.
2. 2021 — 2023

   Junior Technician → Senior Windows Technician

   Carbondale Computer Repair

   • Progressed from Junior Technician to Senior Windows Technician over two years, taking on increasing ownership of infrastructure, training, and escalated technical work.
   • Administered a custom-built, in-house ticketing platform managing workflow and issue tracking for all incoming service requests.
   • Configured and maintained network firewall infrastructure, managing rule sets and access policies across client and internal networks.
   • Performed component-level hardware repair, including soldering and board-level diagnostics, on laptops, desktops, and peripherals; trained and mentored incoming technicians.
3. 2019 — 2021

   Junior Technician

   Fyxit

   • Diagnosed and resolved Windows OS issues, conducted virus and malware cleanup, and performed data recovery on damaged or corrupted drives.
   • Performed small electronics and mobile device repairs; managed inventory tracking and parts procurement for repair operations.

Education