Information Security Analyst
Proficio
Jun 2025 - May 2026 (1 year)
• Monitored and triaged high-volume security alerts across Elastic Stack, Microsoft Sentinel, and Splunk, separating credible threats from false positives to support timely incident response.
• Queried raw firewall and endpoint telemetry using ES|QL (Elasticsearch Query Language), SPL (Search Processing Language), and KQL (Kusto Query Language) to investigate suspicious activity and accelerate the initial threat assessment.
• Documented investigation steps, indicators of compromise, and root-cause evidence to enable clear escalations to Tier 2 and Tier 3 analysts.
• Built centralized Kibana dashboards with ES|QL and interactive time-series visualizations, improving log analysis workflows and speeding up Tier 1 alert triage.