Josip Kules

- Incident analysis and response, ensuring swift incident response - Monitoring and analysis of threats across multiple SIEMs (Splunk, QRadar) and EDRs (CrowdStrike, Cortex XDR, Azure Sentinel) to detect and mitigate risks, performing basic maintenance and troubleshooting on these platforms. Leveraged advanced SIEM searches—particularly in Splunk—creating custom queries and utilizing associated capabilities to support in-depth threat investigations. - Conduct root cause analysis of suspicious activities.

- Leveraging CloudFormation, CloudWatch, and CloudTrail for seamless deployment, monitoring, and troubleshooting. Conducted in-depth log analysis, server patching, while employing Infrastructure as Code (laC) methodologies. - Developed an automated AWS Lambda drift detection using Pythonscript, enhancing real-time monitoring capabilities and ensuring consistent cloud infrastructure integrity.