/Experience
Career timeline
-
Associate Detection & Response Analyst
Rapid7 · Prague, Czechia · Hybrid
- Investigate and triage dozens of alerts and multiple incidents per shift across a global MDR portfolio of 3,000+ customers, correlating endpoint, network, and cloud telemetry to detect, validate, and contain active threats.
- Perform digital forensics and incident response — host and network forensics, malware triage, and root-cause analysis — to scope intrusions and drive containment and remediation.
- Triage third-party EDR / XDR detections (CrowdStrike Falcon and Falcon Intelligence, SentinelOne, Microsoft Defender, Cortex XDR) in InsightIDR, separating vendor false positives from true threats; author team triage guides (e.g. Citrix NetScaler zero-day).
- Deliver clear, actionable incident reports and remediation guidance to customers, and tune detection content, eliminating false-positive floods of hundreds of alerts.
- Reviewed a production agentic AI SOC platform’s investigations against manual triage verdicts, identifying systematic failure patterns (e.g. benign software escalated as malicious) for the product team; AI-assisted triage and reporting.
-
Security Analyst
Accenture Czech Republic — Cyber Fusion Center · Prague, Czechia · Hybrid
- Investigated and contained endpoint threats using CrowdStrike Falcon as primary EDR (process-tree analysis, Event Search, host containment, Real Time Response) alongside Splunk and Palo Alto Cortex; triaged critical Falcon OverWatch escalations.
- Led the end-to-end incident response process, from initial triage and forensic investigation of security events to strategic escalations.
- Acted as a point of escalation for junior analysts on complex investigations and provided mentorship.
-
Cybersecurity Research & Personal Projects
Independent · Homelabs & CTFs
- Built an Azure honeypot with Microsoft Sentinel: custom log ingestion, KQL queries, and a live attack-map workbook visualizing global RDP brute-force attacks.
- Designed an Active Directory attack / defense homelab; hands-on red-team CTFs and blue-team labs — full write-ups on the projects page.
-
Freelance Translator & Language Instructor
Self-employed · Tuscany, Italy · Remote
- Provided translation services and language instruction in Italian, English, and Japanese.
- Designed personalized curricula for students of varying backgrounds and proficiency levels.