PROFESSIONAL PRACTICE
Cloud security operations
Detection tuning, incident investigation, and operational runbooks across cloud environments in a managed security services setting.
MY CONTRIBUTIONCloud security engineerInfrastructure
The challenge
A managed security team must distinguish actionable threats from noisy telemetry and give each customer a clear path to remediation.
The approach
Correlated audit logs, infrastructure metrics, application telemetry, and container events. Refined detection policies, investigated IAM activity, and automated enrichment and reporting with Python and PowerShell.
The work today
This work brings together alert triage, root cause analysis, containment recommendations, client communication, and documented operational follow-through. Client-specific records and incident details are kept private.