What Jesse demonstrated

Built a beginner SOC incident response workflow end to end: triaged a phishing email, identified anomalous authentication activity including impossible travel, mapped events to the kill chain, and chose a defensible containment sequence. Also produced a structured incident report with timeline, root cause, impact, and practical recommendations focused on MFA, least privilege, and segmentation.

• Leakage-Free Threat Triage
• Anomalous Login Investigation
• Containment Sequencing
• Executive Incident Summarization