A skill, applied
ServiceNow SecOps / SIR
I define and test Security Incident Response (SIR) requirements for incident, entity and closure mappings, and built Sentinel test data for ServiceNow SecOps integration development.
Experience at UK Water Utility
All cards in this section are viewed.
Generate Sentinel test incidents from Teams
Security Automation & Integration TestingBuilt a Copilot Studio and Power Automate workflow that gives ServiceNow developers repeatable Sentinel incidents on demand, with curated entities, overlap protection and automatic rule reset.
Read the storyMake Sentinel and ServiceNow agree on incident closure
SIEM/SOAR Integration & Acceptance TestingDesigned and passed nine bidirectional closure tests, while defining how entities, ATT&CK context and escalation should move across Sentinel, ServiceNow SIR and XSOAR.
Read the storyEvaluate EDR against real incident-response needs
Endpoint Security & Technical EvaluationAssessed SentinelOne investigation, containment and recovery capabilities against SOC requirements, including Sentinel/ServiceNow integration, rollback dependencies and automation licensing.
Read the storyRelated skills