Leah Kaplan

Security Analyst @Fortra

Conduct proactive threat hunting across customer environments using Alert Logic MDR telemetry, streaming alerts, endpoint data, and network artifacts to identify adversarial behavior and undetected malicious activity.• Engineer and tune detection logic and alerting rules within customer consoles to reduce false positives, improve signal fidelity, and enhance threat visibility aligned to evolving attack patterns.• Lead incident investigations by correlating logs, endpoint telemetry, and network traffic to scope intrusions, validate impact, and deliver actionable response recommendations for high-severity events.• Analyze and operationalize security telemetry from Defender for Endpoint, SentinelOne, and CrowdStrike Falcon to support advanced investigations, detection development, and threat hypothesis testing.•Contribute to detection engineering workflows using GitHub Enterprise, implementing version control, peer review, and continuous improvement pipelines to maintain rule development and repository integrity.• Leverage Cyber Kill Chain and MITRE ATT & CK frameworks to guide incident response workflows, adversary emulation mapping, root cause analysis, forensic investigation scoping, and hypothesis-driven threat hunting across endpoint, identity, and network telemetry with threat intelligence enrichment.• Lead customer security service orientations and technical onboarding sessions, educating stakeholders on platform capabilities, investigative workflows, and detection scope; translating complex technical concepts into clear, accessible guidance for technical and nontechnical and executive audiences.