Detection engineer at an MSSP. My day-to-day is alert tuning, monitoring, and incident response across a multi-client environment. Primary tools are SentinelOne, Splunk, and CrowdStrike.