Designed and deployed a multi-host SOC for Next Step IT as my graduation project. SIEM stack collecting logs across hosts, threat intelligence feed integration, n8n orchestration and AI agents for automatic alert triage and incident response playbooks. Containerized deployment on Linux. Result: alerts enriched and triaged automatically instead of manually, with a complete pipeline from detection to response.