Yenki

Security Operations Analyst with hands-on experience in daily security monitoring, alert triage, and incident response across SIEM and EDR platforms. Skilled in tuning detection rules to reduce false positives, supporting vulnerability and patch-compliance tracking, and maintaining clear investigation documentation aligned to NIST CSF. Comfortable working cross-functionally with IT and infrastructure teams, with a solid foundation in Windows environments, Active Directory, and core networking (TCP/IP, DNS, routing).

CompTIA Security+ certified, with a track record of dependable SLA performance and strong written communication.

SOC Analyst - Novacoast

(2025-12)

• Perform daily real-time monitoring and analysis of security events across Splunk, Microsoft Sentinel, LogRhythm, Exabeam, and CrowdStrike, consistently meeting SLA response targets.
• Assist with tuning SIEM correlation rules by mapping detected activity to the MITRE ATT&CK framework, reducing false alerts and improving the accuracy of information delivered for action.
• Support the end-to-end incident lifecycle — detection, triage, containment, and remediation — aligning response actions to NIST CSF practices and coordinating with internal and client teams to reduce time to containment.
• Integrate Wiz cloud vulnerability context and SOCRadar threat intelligence into investigations, supporting vulnerability tracking and accelerating root-cause identification.
• Perform post-mortem analysis of logs and network traffic to identify intrusions and unauthorized activity, contributing to SOAR playbook execution and historical log review that reduced MTTR by 10%.
• Maintain investigation records, timelines, and supporting artifacts in Jira, strengthening audit trail quality and supporting compliance and metrics reporting.
• Create and update documentation on detection logic, analysis procedures, and escalation workflows to support process maturity and team-wide consistency.

Tier 2 Technical Support - ISPN

(2024-08 - 2025-12)

• Diagnosed and resolved network, DNS, VPN, and Wi-Fi connectivity issues across 30–40 customer cases daily in Windows environments, minimizing downtime through rapid root-cause troubleshooting.
• Maintained an average handle time of 8 minutes while sustaining high customer satisfaction, reflecting strong technical communication and prioritization under time pressure.
• Built the networking and systems foundation (TCP/IP, DNS, routing, VPN, router/firewall basics) that now underpins day-to-day security monitoring, log analysis, and alert investigation.

Bachelor of Applied Computing - Cybersecurity Emphasis, Minor in Psychology - Wichita State University (2021-08 - 2024-05)