Yeabsra
Dereje

End-to-end pipeline ingesting live CISA advisories and threat feeds, leveraging LLMs to auto-generate structured incident reports for SOC analysts.

• Extracted threat actors, TTPs, affected systems, and IoCs from multiple intelligence sources automatically
• Reduced manual triage time by operationalizing AI within a real-world SOC analyst workflow
• Integrated output into Splunk dashboards for real-time threat trend visualization

Full SIEM deployment on Azure simulating a SOC environment with an intentionally exposed RDP honeypot to attract brute-force traffic and validate detection at scale.

• Engineered an exposed RDP honeypot generating 500+ brute-force login attempts daily
• Achieved 100% detection of successful login attempts through fine-tuned alerting rules
• Simulated end-to-end SOC incident response workflows, reinforcing industry best practices

Authorized external vulnerability assessment for a local business, translating technical findings into plain-language recommendations for non-technical stakeholders.

• Obtained explicit written permission and scoped assessment ethically before any testing
• Configured and executed Qualys scans assessing external website security posture
• Used AI analysis to bridge technical findings and business-friendly remediation guidance