I investigated and triaged security incidents using Splunk SIEM, Microsoft Defender O365, Microsoft Azure, CrowdStrike, and other tools, managing an average of 180 alerts per month with peaks of up to 240 while maintaining over 90% SLA compliance. I executed remediation for confirmed threats, escalated complex cases, and collaborated across teams to strengthen the organization’s security posture. The role ended following BT’s decision to close its CyberSec and NetSec operations in Mexico.

I performed triage and classification of alerts, escalating suspicious cases to higher tiers, and conducted vulnerability scans using the Tenable platform. I managed 180–240 alerts per month with consistent SLA compliance, while supporting Tier 2 with cloud security alerts and assisting Tier 3 in vulnerability analysis and VPN-related cases. Additionally, I collaborated with Tier 2 and Tier 3 teams to prepare weekly and monthly executive presentations for my SOC Manager.