Finance Firm — 2026-Aug-12

2026-Aug-12 Finance Firm

Build, harden, and operate a major telemetry pipeline that streams AI-tool usage and firewall security events into a cloud SIEM, delivered across two phases with an managed-service retainer.

Provisioned and security-hardened a cloud collector (managed identity, just-in-time access, deny-by-default networking) behind a TLS-secured, WAF-protected ingestion endpoint
Delivered an AI-tool usage pipeline carrying hundreds of thousands of records with per-user and per-session attribution
Added firewall security-event ingestion plus a heartbeat alert if either data stream goes silent
Automated the retainer with scheduled jobs for connector-health digests, cost reporting, and schema-change tracking, retaining all operations

Related projects

2026-Aug-12· Finance Firm Design and stand up a major, bilingual, fully managed cloud security operations center on Microsoft Sentinel, connecting the client's Microsoft and firewall… View details →
2026-Jul-30· Finance Firm Detect, investigate, and contain a QR-code phishing ("quishing") campaign impersonating an internal notice — removing every copy from the client's mailboxes… View details →
2026-Jul-16· Finance Firm Review a client's completed counterparty cybersecurity self-assessment before submission, validating responses and ensuring the managed security controls we… View details →
2026-Jul-14· Finance Firm Remediate actively-exploited critical firewall vulnerabilities under urgency: apply interim protection, verify no compromise, and complete a coordinated remote… View details →