Five years of hands-on security work.

Drove a 100% reduction in critical, 90% in high, and 76% in medium vulnerabilities for the server team via Tenable scanning and PowerShell-based remediation.

Performed internal vulnerability assessments and validated scan results using Tenable and CVSS scoring across Windows and Linux environments.

Partnered with system owners on remediation plans and tracked findings to resolution within SLAs, reviewing false positives and exceptions.

Executed secure configuration and compliance audits (DISA STIG) with Tenable to meet industry and regulatory standards.

Built Microsoft Sentinel dashboards and weekly vulnerability metrics to report threats and remediation progress to stakeholders.

Developed custom detection rules in Microsoft Defender for Endpoint to automate isolation and investigation of compromised systems.

Performed EDR threat hunting to detect IOCs from brute-force, exfiltration, and ransomware activity; documented threat scenarios and playbooks for tabletop exercises.

Eliminated recurring brute-force incidents by implementing inbound NSG and firewall rules to limit internet exposure.