// 02 — experience & projects
Professional Experience & Projects
Security Operations Center (SOC) Intern
Infozit — Wazuh Cloud Project (AWS)
Team of 4 · July 2026 – Present
- Deployed and configured a pre-production Wazuh SIEM (manager, indexer, dashboard) on an AWS EC2 instance to monitor a multi-OS cloud environment
- Onboarded endpoints by installing Wazuh agents on Windows 11, Windows Server, and Ubuntu Server virtual machines for consistent log ingestion
- Configured a custom web server to generate and forward HTTP traffic logs to the SIEM for monitoring
- Authored and tested custom detection rules, successfully identifying simulated brute-force and web-based attacks
- Built the initial Wazuh stack using Docker, resolved virtualization errors, and configured Role-Based Access Control (RBAC) for secure team access
- Managed detection rules and configuration in Git through a pull-request workflow and maintained runbooks for repeatable operations
SOAR and EDR Incident Response Playbook
LimaCharlie · Tines · Slack
Personal Project
- Enrolled a Windows 10 VM as a LimaCharlie EDR sensor, simulated credential-theft activity with LaZagne, and wrote a custom Detection and Response (D&R) rule validated with historical replay
- Built a Tines SOAR playbook that posts alert details (host, user, file path, command line, sensor ID) to Slack and prompts the analyst to isolate the endpoint (YES/NO)
- Automated containment: the YES path calls the LimaCharlie API to isolate the endpoint, the NO path only notifies; tested both paths and documented the workflow