Okta, Threat Hunting, PowerShell, AWS, Siem, Python, Azure, cloud security, Gcp, event log correlation, incident response lifecycle, AD, SOAR, detection development and tuning, KQL, XDR, TTPs, scripting automation, IOCs, Entra ID, identity security, EDR, SPL, SOC operations