John Rey Gavilaga
On the difference between an alert and an incident
Most of the job isn't investigating threats, it's deciding what doesn't matter, quickly and correctly…
SOC Analyst L3.
Threat Hunter.
Automation Builder.
I'm a cybersecurity professional with hands-on experience in SOC and NOC operations, focused on threat detection, incident response, and security monitoring. I've worked across SIEM/XDR tools, investigated endpoint and network-based alerts, and built a solid understanding of how real-world attacks unfold. I also use automation and AI-driven tools, through my own company, JanriTech Automations, to make security and operational workflows faster and more reliable.
10+Certifications
3+Years in SOC/NOC
9Workflows automated
L3Analyst level
Active
1 runningFounder, JanriTech Automations
Designing n8n, Power Automate, and Zapier workflows that cut manual effort out of security and business operations. See the full portfolio.
Recently resolved
full history →DFIR Analyst / Cybersecurity Manager
Led the cybersecurity team, directing SOC operations, task allocation, and incident response across US-based clients — from detection through containment, remediation, and post-incident review.