Vasilis M

Senior Threat Detection Engineer

Obrela

Dec 2024 - Present • 1 yr 9 mos

-Author and tune threat detection analytics in Azure Sentinel and Microsoft Defender XDR using KQL, covering network, endpoint, and cloud data sources -Lead threat hunting initiatives targeting novel attack patterns and zero-day coverage, mapped to MITRE ATT&CK -Architected the CTEM (Continuous Threat Exposure Management) service detection pipeline on Microsoft Defender XDR, covering telemetry ingestion, detection logic, and MSS analyst workflows -Implemented 150+ alert tunings in Azure Sentinel, decreasing noise by up to 70% for high-priority detections while preserving coverage fidelity. -Review and QA detection analytics authored by team members; mentor junior analysts on KQL and threat-informed defense

Security Operations Engineer

Neurosoft

Jul 2024 - Dec 2024 • 5 mos

-Architected and maintained QRadar SIEM infrastructure supporting 30+ managed security services customer environments -Standardized log onboarding for 30+ MSSP customers, reducing integration time and improving consistency across customer deployments -Optimized QRadar infrastructure through improved backup management and disk allocation strategies -Introduced Ansible for infrastructure provisioning and repetitive deployment tasks, enabling rapid SOC R&D environment setup. -Authored and maintained playbooks and operational documentation for incident response workflows