John Matthew Obo

Cybersecurity professional with hands-on experience in Security Operations and Managed Detection and Response (MDR), specialising in log monitoring, alert triage, incident investigation, and threat hunting across multiple client environments. Experienced in SIEM, EDR, and XDR platforms with a strong foundation in MITRE ATT&CK, incident response methodologies, and security frameworks including NIST, ISO 27001, and CIS Controls.

Background as a client-facing Systems Engineer has developed strong communication skills, comfortable engaging with both technical teams and non-technical stakeholders to present findings, coordinate responses, and drive outcomes. Adept at cross-functional collaboration, SLA compliance, and proactively detecting and responding to threats including phishing, malware, and ransomware. Committed to continuous growth through certifications and field exposure.

Security Operations Center (SOC) Analyst - MDR at Red Rock IT Security Inc. (2025-11 – Present)

• Monitor and analyze security alerts across multiple client environments using Splunk SIEM, correlating data from diverse log sources to detect and validate threats.
• Investigate threat intelligence feeds from Recorded Future, correlating IOCs against client infrastructure to identify exposure and emerging risks across the client pool.
• Manage and escalate validated incidents through TheHive, providing detailed case documentation and actionable remediation steps for client SPOCs.
• Participated in Use Case Review (UCR) sessions to evaluate and fine-tune MITRE ATT&CK framework-based detection rules mapped to specific tactics and techniques, collaborating with the detection engineering team to improve fidelity and reduce alert noise.
• Perform proactive threat hunts across client environments, identifying potential indicators of compromise and delivering actionable recommendations to strengthen client security posture.
• Assisted newly onboarded MDR analysts in understanding investigation workflows, playbook execution, and day-to-day SOC responsibilities.
• Operate within a SANS-based SOC framework reinforced through SOC exams and tabletop exercises using SEC401, SEC511, and SEC555 study materials.
• Ensure 100% compliance with internal and external SLAs across all monitored client environments.

Systems Engineer - Network and Cybersecurity Solutions at One Depot (Print Depot Inc.) (2024-12 – 2025-11)

• Served as a primary client-facing engineer, regularly engaging with both technical and non-technical stakeholders including client decision-makers, IT teams, and third-party vendors to present solutions, discuss requirements, and coordinate deployments.
• Delivered pre- and post-sales engineering support including POC/POV demos, solution design, installation, configuration, and maintenance across network, security, and infrastructure platforms.
• Designed and implemented multi-vendor network and cybersecurity solutions with high availability, disaster recovery, and security compliance.
• Coordinated deployments and escalations with vendors and distributors; maintained SLA compliance and thorough documentation.
• Attended MSOC meetings with clients and third-party vendors; continuously updated product knowledge through vendor-led trainings and bootcamps.

Technical Intern at Intelligent Open Systems Inc. (2024-06 – 2024-08)

• Participated in client-facing POC presentations and provided hands-on technical support for hardware and network issues.
• Collaborated with the IT department on technology deployment, system maintenance, and proactive network monitoring and troubleshooting.

Bachelor of Science in Electronics Engineering – Rizal Technological University (2019-08 – 2024-10)