Finance Firm — 2026-Aug-12

Design and stand up a major, bilingual, fully managed cloud security operations center on Microsoft Sentinel, connecting the client's Microsoft and firewall data sources with detection rules, dashboards, and automated alert routing.

• Built bilingual dashboards spanning incidents, identity, endpoint, email, and cloud apps, deployed via infrastructure-as-code
• Deployed a curated set of high-severity detection rules with incident grouping to suppress alert-burst noise
• Consolidated multiple security data sources — directory, extended detection and response, and a firewall — into workspace
• Built an end-to-end automated alert-routing pipeline to a triage inbox with a severity-based classification policy, backed by an managed-service retainer