Security alert triage & investigation
Triaged Sentinel alerts and reviewed phishing indicators and authentication activity.
Microsoft SentinelKQLActive Directory
CYBERSECURITY PORTFOLIO CHICAGO, IL
Bright Opoku
Boateng.
Alert triage, security investigation, and vulnerability management.
Practical experience across SIEM, identity, and cloud security.
CompTIA Security+Master of Cyber Forensics & Security · Illinois Tech
CYBERSECURITY ANALYST
SOC & Security Operations
01 / SELECTED WORK
Find the experience that fits.
Seven case studies. SOC, vulnerability,
cloud, and identity security work.
CASE STUDY SPOTLIGHT
Reduced motion
FILTER BY RELEVANCE
Internship01
Security operations
Security alert triage & investigation
Triaged Sentinel alerts and reviewed phishing indicators and authentication activity.
Microsoft SentinelKQLActive Directory+2
MyHeat · Oct–Dec 2025
Internship02
Vulnerability assessment
Vulnerability review & remediation priorities
Reviewed Tenable and Nessus findings, validated CVEs, and applied CVSS severity.
TenableNessusCVE / CVSS
MyHeat · Oct–Dec 2025
Coursework03
Vulnerability assessment
Windows Server: a black-box assessment
Assessed exposed services, misconfigurations, and privilege-escalation risks with Kali Linux.
Kali LinuxWindows ServerRisk prioritization
Illinois Institute of Technology
Lab04
Security operations
SOC detection & monitoring lab
Investigated Windows security events, failed authentication attempts, and suspicious activity.
Windows security eventsLog analysisInvestigation documentation
Hands-on SOC lab
Lab05
Cloud & identity
Microsoft Azure security & identity lab
Explored identity protection, threat monitoring, endpoint management, and data security.
Entra IDMicrosoft DefenderMicrosoft Sentinel+4
Microsoft cloud security lab
Lab06
Cloud & identity
AWS cloud security lab
Practiced access management, storage security, and cloud activity monitoring with AWS services.
AWS IAMEC2S3+4
Hands-on AWS lab
Experience07
Security operations
Security monitoring in a testing environment
Reviewed SIEM data and system logs while supporting authentication and access security.
SplunkMicrosoft SentinelKQL+2
College Board · Mar–Jun 2025
02 / EXPERIENCE
A foundation in
security and operations.
My work combines alert investigation, vulnerability review, and a technical operations background.
Master of Cyber Forensics and Security
Illinois Institute of Technology · May 2026
B.Sc. Telecommunication Engineering
Kwame Nkrumah University of Science and Technology · June 2019
Certifications
CompTIA Security+ ce
Microsoft Security Essentials Professional Certificate
CompTIA CySA+ In progress
Cybersecurity Intern
Oct–Dec 2025MyHeat · Remote
Triaged alerts with Sentinel and KQL, analyzed phishing and malware indicators, reviewed authentication activity, and prioritized vulnerability remediation.
Security Support
Mar–Jun 2025College Board · Chicago
Analyzed security events and system logs with Splunk, Sentinel, and KQL, and supported authentication and access security through IAM and Zero Trust principles.
Operations Support Analyst
Jun 2021–Jul 2024Vodafone
Monitored transaction systems, investigated suspicious patterns in transaction logs, and identified root causes of system incidents to support corrective actions.
LET’S CONNECT
Have a role in mind?
Interested in security operations, vulnerability management,
incident response, and cloud security opportunities.