What Gabriel demonstrated

Built an end-to-end SOC incident response workflow for a phishing-led breach: triaged the email indicators, identified anomalous authentication activity, mapped events to the cyber kill chain, and selected a containment sequence that prioritized cutting attacker access. Also drafted a GDPR Article 33 notification and an executive incident report with practical controls, including MFA and least privilege.

• Leakage-Free Threat Triage
• Evidence-Based Incident Investigation
• Structured Incident Response Sequencing
• Risk-Driven Security Communication