Erwin Dusojan

• Leads investigations into advanced threats, including malware incidents, credential abuse, lateral movement, and data exfiltration.
• Performs disk and memory forensics using tools such as Volatility, FTK Imager, Timeline Explorer
• Supports Threat Intelligence by enriching IOCs and profiling adversary TTPs aligned with MITRE ATT&CK techniques.
• Utilizes Microsoft Defender XDR, Microsoft Sentinel, and Kusto Query Language (KQL) for threat hunting, alert triage, and cross-log correlation.
• Contributes to internal security awareness, Tabletop Exercises, and SOC operational maturity initiatives.
• Authors and maintains investigation playbooks, escalation workflows, incident timeline templates, and manual Defender triage guides.
• Tracking malware families, phishing campaigns, and persistence mechanisms targeting enterprise users.

• Interpol Trainer for Advanced Malware Analysis
• Led the design and development of advanced cybersecurity courses, including Advanced Threat Defense 30x which covers: Security Analyst Fundamentals, Adversary Emulation, and Incident Response and Digital Forensics.
• Other Courses developed includes, Linux 10x – Fundamentals, Linux 20x – Linux Malware Analysis, and Assembly Programming Fundamentals.
• Conducted Cybersecurity Fundamentals training across Philippine universities, equipping both faculty and students
• Delivered specialized training programs for elite institutions including Interpol, JICA, Royal Thai Air Force, Philippine Army, DICT, and Philippine Airlines.

• Handled escalated technical issues and guided L1 support teams in resolving home system problems.

• Provided real-time technical support for Gateway PCs, resolving a range of hardware and software issues over the phone.

Worked part-time during student years in various customer-facing roles at Jollibee, SM, Ever Gotesco, and Max’s Restaurant, gaining valuable experience in service operations, teamwork, time management, and frontline customer interaction.