Aiden Knecht
Resume
Cybersecurity student (4.00 GPA, Security+, AZ-900) with enterprise co-op experience in phishing investigation, identity and SSO auditing, Microsoft Sentinel log ingestion, cloud security, and Python security automation.
Security+ earned May 2026. Verify on Credly.
- Cincinnati, OH
- knechtaj@mail.uc.edu
- GitHub
Download the PDF, updated .
Recruiters: email me for a more detailed resume.
Experience
IT security and infrastructure co-op
AtriCure, Mason, OH · May 2026 – Aug 2026
- Triaged 294 user-reported emails in Defender XDR and PhishER using SPF/DKIM/DMARC, header, sandbox, and KQL analysis; remediated with deletions, quarantine decisions, and blocks.
- Designed and built a production Python Azure Function that brings Cloudflare Security Insights notifications into Microsoft Sentinel through Azure Monitor data collection rules.
- Audited single sign-on configuration, SAML/OIDC protocols, and certificate status across the company's Entra enterprise applications, and reported the results to security leadership.
- Configured KnowBe4 executive phishing reports and presented phishing-trend data at SecOps meetings.
- Investigated unsanctioned cloud application use with Defender for Cloud Apps and KQL, and escalated findings to security leadership.
- Supported identity reviews in Entra ID, Microsoft Graph, and Purview, and investigated sign-in alerts.
Shift leader
Graeter's, West Chester, OH · Jul 2025 – present
- Run store shifts as the on-site manager, directing two to three staff on weekdays and up to six at peak while prioritizing customer escalations, cash control, breaks, and real-time labor adjustments.
Certifications
- May 2026
- Aug 2026
Projects
Azure Sentinel honeypot and live attack map
Jun 2026
- Streamed Security Events from an exposed Azure Windows Server VM through Azure Monitor Agent and a DCR into Microsoft Sentinel; analyzed 3,500+ failed RDP logons in 24 hours with KQL geolocation, tracing 3,106 to one source.
- Built a Sentinel workbook attack map and monitored Event ID 4624 for successful external logons; none were observed.
PhishTriage
Sep 2026
- Chose an explainable rules-over-ML design and validated an AI-assisted Python CLI that scores .eml files on SPF/DKIM/DMARC alignment, header anomalies, and suspicious URLs/attachments.
- On a small 33-message synthetic/sanitized test set, flagged 13 of 18 phishing emails with no false alarms on 15 benign; documented the five misses, mostly compromised-account scams.
COI date rollover and QA automation
Sep 2026
- Directed and delivered a production date-rollover and independent QA workflow for 1,268 insurance certificates, reviewing automated reports and visual exceptions with the client.
Education
B.S. Cybersecurity
University of Cincinnati · Expected summer 2028
GPA 4.00. Choose Ohio First Scholar. Dean's List, Fall 2025 and Spring 2026.
Coursework: Information Security & Assurance; Network Infrastructure Management; Network Monitoring & IPS (in progress); Computer & Network Forensics (in progress).
Skills
- Security
- Microsoft Defender XDR, Microsoft Sentinel, Microsoft Defender for Cloud Apps, PhishER, KnowBe4
- Cloud and identity
- Azure Functions, Microsoft Entra ID, Azure Monitor / DCR / DCE, Cloudflare, Azure Log Analytics, SAML
- Scripting and analysis
- Python, KQL, Microsoft Graph API, PowerShell, SQL
- Networking and systems
- DNS, TCP/IP, Windows Server, Wireshark, Linux / Ubuntu, Nmap
- Security concepts
- Incident response, Network security, Access and authorization, Cryptography and PKI, Cloud computing