Darktrace
New York, NY · Security operations · Detection · Threat research
Senior Cyber Analyst
Current roleCore member of the Model Development Team, resolving 40+ model-performance and tuning issues and independently developing 5+ detection models through experimentation and threat research.
- Lead high-priority, complex SOC investigations; analyze suspicious behavior and produce detailed SPOT reports that communicate findings, context, and analytical assessments.
- Conduct threat research and hunting; contribute technical writing and team-wide presentations.
- Mentor analysts through structured onboarding, weekly office hours, and hands-on labs; develop standardized workflows and training resources.
Cyber Analyst
Conducted real-time and retrospective SOC threat analysis, generating 5–7 daily Threat Intelligence Reports and detailed SPOT reports based on deep-dive investigations of suspicious behavior.
- Analyzed datasets from hundreds to millions of records using Python, SQL, advanced Excel, and security analytics tooling; produced 2+ strategic threat trend reports over two years.
- Collaborated with the model development team to create and optimize 10+ detection and response models. This is a collaborative contribution, distinct from independently developed models.
Cyber Technology Specialist
Principal technical liaison between clients, partners, and internal stakeholders; delivered 50+ tailored threat intelligence briefings and analytical reports and managed operational integrity across 100+ client deployments.
- Translated complex threat intelligence for audiences from SOC analysts to C-level executives.
- Top-five ranking in the 2021 Darktrace RESPOND competition, Cyber Engineer and Technician (CET) category.
Cybersecurity Researcher and Content Writer
November 2020 to May 2021Researched cybersecurity and cyberspace operations and authored more than 20 articles, translating complex security topics for the intended audience.
Security and Compliance Analyst
June 2019 to June 2020Worked with NERC CIP standards and Change Gear cybersecurity asset management. Assessed vulnerabilities on 20–30 lab assets, including HMIs, PLCs, and operational technology, using Metasploit, Nmap, and Nessus. Developed PowerShell and Bash automation for 100,000 files and folders.
Complex SOC investigations & SPOT reporting.
As a Senior Cyber Analyst, I lead high-priority, complex SOC threat investigations. My work includes examining suspicious behavior, connecting findings across the investigation, and producing detailed SPOT reports that communicate findings, evidence, and analytical assessments.
Earlier SOC work included both real-time and retrospective threat analysis and deep-dive SPOT reporting for security and executive stakeholders. The value lies in making complex findings understandable and actionable, not presenting an isolated alert as the whole story.
Standardized workflows, training resources, onboarding, office hours, and hands-on labs help turn investigation knowledge into consistent analyst practice. Internal report contents, customer information, and proprietary detection details are not published here.
See the investigation methodology