Overview

At a UK health-tech company I own day-to-day security alert handling across the endpoint estate (Windows, macOS, and Linux), first as System Administrator and Threat Management Engineer, and now as DevSecOps Engineer. The most significant engagement in this role was leading the response to a live, high-severity security incident.

What I do

• Triage and mitigate alerts from the EDR/XDR platform, escalating and responding according to incident severity and response protocols
• Lead containment, investigation, and recovery once an incident is confirmed
• Support cloud security operations, including access control and audit-log monitoring
• Correlate cloud activity with endpoint telemetry to build a complete picture of an incident
• Produce incident documentation and evidence for leadership and regulators

Skills

Incident response, EDR/XDR operations, threat triage, cloud security monitoring, incident documentation.