Lucian Stoichitoiu

Sr Soc Analyst @CyberClan

Manchester, GB

I’m responsible for leading complex investigations, developing scalable detection strategies, and serving as an escalation point for high-priority security incidents across a diverse global client base.Key Contributions & Responsibilities:Lead incident response efforts for P1/P2 security events, acting as primary incident handler and coordinating cross-functional teams.Design and implement robust documentation and methodologies for optimal SIEM deployment and integration.Manage and support SIEM operations across 100+ clients with varied network infrastructures and security requirements.Integrat a wide range of log sources and formats, and deployed advanced detection logic including custom SIGMA rules.Review emerging threats and collaborate with clients to build tailored detection use cases and improve overall security posture.Develop automated tooling and deployments using various scripting and programming languages to streamline SOC operations.Perform proactive threat hunting leveraging internal telemetry and threat intelligence for early detection and mitigation.Provide expert-level support for escalated incidents, guiding technical investigations and advising on remediation strategies.Maintain continuous client communication around incident updates, resolutions, and post-incident improvements.Create and maintain incident response playbooks, internal knowledge base content, and operational runbooks.Mentor junior analysts, supporting their development in areas like triage, escalation, and content engineering.Produce threat intelligence reports and customer-facing advisories based on ongoing research and global threat trends.