Bo Bonilla

About Bo Bonilla

I’m a bilingual (English/Spanish) cybersecurity analyst based in Philadelphia focused on security operations, threat detection, and incident response in cloud environments.Through hands-on work in a simulated -() and training through the Per Scholas Cybersecurity Analyst program, I’ve investigated security alerts in, analyzed security telemetry using, and supported incident response workflows aligned with the 800-61.My experience includes assessing Azure environments against 800-53, investigating potential, and supporting identity and access management practices in. I’m particularly interested in security operations work that involves alert triage, log analysis, threat investigation, and incident response. I work with include Microsoft Sentinel (SIEM), Azure, Entra ID, Splunk, KQL, NIST 800-53, CIS Controls, and NIST 800-61, along with tools used for log analysis, network investigation, and vulnerability analysis: Philadelphia 19103 : Full-time, contract, hybrid, on-site, and remote opportunities :• SOC Analyst• Security Operations Analyst• Junior Cybersecurity Analyst• Vulnerability Management Analyst• Incident Response Analyst :SIEM monitoring • Threat detection • Log analysis • Incident response • Identity security • Azure security operations • Security frameworks • Technical documentationPortfolio & resume.

Experience

1. Cloud Security Operations Intern

   Log N Pacific

   Jan 2026 — Present · Philadelphia, PA, US

   Support security operations in Azure cloud environments, focusing on threat detection, security monitoring, incident response, and identity security.• Investigate security alerts in Microsoft Sentinel (SIEM) to identify suspicious activity and potential indicators of compromise • Assess Azure infrastructure against NIST 800-53 and CIS Critical Security Controls to identify configuration weaknesses and security risks • Support incident response activities aligned with the NIST 800-61 lifecycle • Manage identity and access controls in Microsoft Entra ID, reinforcing least-privilege security practices • Analyze Azure security telemetry to strengthen monitoring and detection capabilities • Use KQL queries in Microsoft Sentinel to support investigations, alert triage, and threat analysisSkills: Microsoft Sentinel, Azure, Entra ID, Threat Detection, Incident Response, SIEM, NIST 800-53, CIS Controls

Education

• Per Scholas

  Cybersecurity Analyst, Computer and Information Systems Security/Information Assurance