$ cat ~/experience

1. SentinelOne

   MDR Analyst

   aug 2026 → present

   front-line detection and response, with a growing focus on building tooling and automation to scale triage.

   • ▸built a Chromium extension for the S1 console that surfaces escalated clients (active P1s and confirmed penetration tests, via GitHub Actions, Slack and Salesforce integrations).
   • ▸automated a log-parsing and triage script that correlates process trees using Claude scheduled tasks and custom skills, decreasing time-to-action on P1/P2 escalations by five times.
   • ▸co-develop MDRecon, an in-house tool that extracts high-fidelity IoCs from past incident reports and correlates them across P1 escalations to attribute TTPs
   • ▸work directly with customers during active incidents, guiding response and communicating findings and risk

   Associate MDR Analyst

   aug 2025 → aug 2026

   managed detection and response across Windows, Linux and macOS. Real, contemporary threats: fileless execution, social engineering chains, infostealers, botnets, cryptominers, supply chain compromises, and ransomware.

   • ▸first responder on the Axios npm supply chain compromise: flagged it in our environment, mapped the whole chain from poisoned dependency to C2, and relayed tactical IoCs to build a retrospective detection
   • ▸contained pre-ransomware intrusions before encryption, and responded to ransomware (.akira, .booba, .termite & Qilin)
   • ▸identified and took apart Windows and macOS infostealers and their loaders (Vidar, Lumma, RedLine, Rabbit, Atomic macOS Stealer (AMOS), MacSync, GootLoader, custom loaders) for persistence, credential theft and exfiltration
   • ▸worked extensively with living-off-the-land techniques, including finger, certutil, mshta, cmdkey and WebDAV
   • ▸remediated botnets and cryptomining: Mirai, XMRig, and USB-borne worms like Tangerine Turkey

2. Monash University

   Cyber Security Systems Analyst

   feb 2025 → jul 2026

   detection, response, and automation across the monash group. building detection capability and the plumbing behind it, and mentoring the people using it.

   • ▸lead major incident investigations and coordinate response across teams
   • ▸design and build detections
   • ▸write and maintain security automations
   • ▸assist in integrating security systems to sharpen detection and response
   • ▸mentor junior analysts in incident response and operations
   • ▸steer security posture and enterprise environment decisions

   Associate Cyber Security Analyst

   mar 2024 → feb 2025

   soc analyst for the monash group. triaging, investigating and remediating threats, with a side of firewall and network security work.

   • ▸triage and respond to security incidents
   • ▸run digital forensics and active incident response
   • ▸review network acl requests
   • ▸manage firewalls and write firewall policy
   • ▸provide security oversight for network architecture
   • ▸turn business requirements into security standards with stakeholders

3. PwC

   Risk and Control Assurance, Associate Intern

   jun 2023 → dec 2023

   risk and controls intern. assessing controls across a range of industries, testing whether they actually held up, and telling clients what i found.

   • ▸run risk assessments and control evaluations
   • ▸spot control weaknesses and unaccounted for risks
   • ▸test whether risk mitigation controls actually work
   • ▸present findings and recommendations to clients
   • ▸work with stakeholders on their business objectives

$ cat ~/education

1. Monash University

   Bachelor of Business and Information Technology

   mar 2021 → nov 2024

   Majoring in Banking and Finance & Computer Networks and Security. GPA: 3.625, WAM: 82.000