nickchow

Researched and enhanced detection rules for the Network Detection and Response product, covering various network protocols and application traffic. Validated existing detection rule logic by reproducing exploits in lab environment. Conducted threat hunting in customer environments to enhance the value of our product. Verified functionality and found vulnerabilities of the NDR engine before each release.

In-depth analysis for various threats including phishing, malware, and exploits, leveraged MDFE and Sentinel logs with KQL to identify and mitigate potential security breaches. Expertise in fine-tuning detection logic, resulting in a significant reduction in false positives. Build automation scripts or features for internal use by teammates, streamlining processes and enhancing operational efficiency.

Performed training and quarterly assessment on all analysts with respect to OWSAP top 10 and real time packet capture analysis. Conducted manual and API automated testing on cloud staging environments for existing and new function modules. Incident responses to security breaches, web and DDOS attack. Protected servers from DDOS by applying mitigation to maintain 99.5% of server availability.

Implemented the revamping of computer-based examination center infrastructure. Installed, configured, and maintained servers including Windows Server, VMs, Firewall. Automated repetitive tasks to save 30% of operational time.

Created eCommerce websites with content management system. Built a coding test system for HR/Dev team to streamline hiring process. Completed projects with Facebook Graph API, SMS gateway API, Webhook, and more.