Adam Schwartz

Security Operations Center Analyst L2 @GMI - Global Market Innovators

Phoenix, AZ, US

Design and implement detection logic across Elastic and EDR platforms using KQL and custom queries to improve alert fidelity and reduce false positives.• Develop and tune threat detections mapped to MITRE ATT & CK techniques to expand coverage across endpoint, identity, and cloud telemetry.• Troubleshoot and maintain threat intelligence infrastructure including MISP, OpenCTI, and IntelOwl, resolving connector, service, and ingestion issues across Docker-based deployments.• Engineer IOC enrichment and ingestion pipelines integrating external intelligence sources to automate indicator analysis and investigation context.• Resolve log mapping and schema normalization issues across telemetry sources to improve detection reliability and analytics accuracy within the SIEM.• Build security dashboards and analytics views to improve threat visibility and support internal reporting and executive demonstrations.• Support security platform engineering by onboarding new data sources, validating telemetry quality, and improving detection pipeline reliability.• Automate enrichment and investigation workflows across security tooling to reduce analyst response time and improve incident triage efficiency.

Embry-Riddle Aeronautical University

Bachelor's Degree, Cyber Intelligence and Secuirty