- Design, implement, and continuously improve detection rules across SIEM, EDR, and cloud security platforms.
- Develop automated response playbooks to reduce mean time to detect (MTTD) and respond (MTTR).
- Leverage GenAI tools to accelerate log analysis, threat triage, and incident data enrichment.
- Generate detection logic including Sigma rules, queries, and scripts.
- Integrate GenAI into SOC workflows via APIs and internal tooling.
- Enhance detection pipelines using AI-assisted enrichment and correlation.
- Analyze logs across endpoints, cloud environments, SaaS platforms, and networks.
AWSPythonGenerative AI