Samba Jeng
Phone: 301-***-****
Email address: ad23ed@r.postjobfree.com
Address: 25901RidgeManorDR Unit D
Damascus, Maryland, 20872
Summary: Samba has Experience as an IT Support analyst with experience in investiatni network, applicaton, and endpoint alerts. iood knowledie in analyzini phishini emails includini email headers, and malware, and acts as a frst responder to security incidents and events. Samba has successfully Provided direct assistance to customers via telephone and email and investiated compromised systems to determine threat vectors and provide inital remediaton also has experience in performini tasks usini diferent SIEM tools to monitor and analyze incidents and work with diferent teams to resolve incidents. lluent in Enilish and Arrabic, have ireat communicaton skills, and a fantastc team player. He has experience in establishini and maintainini disaster recovery procedures and sites, Java, Gooile DLP, and Splunk.
Skills:
lireEye
IT Helpdesk
IronPort
Sourcefre
McArfee Web Gateway
Splunk
Splunk Express
McArfee DLP
Gooile DLP
Ariile
Gooile Ardmin
Java/GitHub
Gooile Vault
ArirWatch
Enable
Planview
Wireshark
Scrum
IDS/IPS
Norton, Symantec/Cylance
ServiceNow
Sop
Run book
Arutomatonn Experience related to Arnsible for performini administraton usini code and Git/Gitlab for workfow manaiement
lamiliarity with Windows and Linux inteiraton, SSL database technoloiies, troubleshootni, deployment, patchini, and administraton
Experience with Loistash and ability to collect, parse, and transform lois
Experience with the standards compliance process (e.i., NIST) and writni network security documentatonJIRAr
Remedy
Heat tcketni system
scale
VirusTotal.com
SSL Databases
zscaller.com
HTTP Requests
IBM-XlORCE
Project manaiement
Lookini Glass
URLSCArN
Biliniual (Enilish/Arrabic)
NIST RMl
Educaton:
University of Maryland, College Park, MD Jun 2020
Bachelor’s degree
Work Experience:
Visual Sof--ysons Corner, VA
SOC Analyst Aug2022-present
Security Analyst
Perform security event/alert monitorini and analysis. Remediate incidents and escalate as required.
Perform daily monitorini and analysis of suspicious email and web trafc.
Work closely with the Network Operatons Center and Helpdesk to analyze suspicious events, develop security awareness, and remediate incidents.
Monitor informaton security industry news and bloi posts for internal and external threats.
Monitor and identfy security risks to the Company and the relevant technoloiy or behaviors requirini chanie to mitiate those risks.
work with your team on projects such as optmizini the Jira/Confuence environments of our clients so that the experience of end-users improves, supportni Artlassian cloud miiratons, confiurini new Bitbucket environments, and so on.
Java used for Support to End of End ownership of applicatons and Hands-on support.
Ariile methodoloiy is used to help service desk teams focus on customer value and satsfacton by deliverini solutons that meet their needs and expectatons.
Planview sofware provides a sinile locaton to monitor tme, budiets, and expenses for your projects.
Respond to and, where appropriate, resolve or escalate reported security incidents.
Monitor system lois and network trafc for unusual or suspicious actvity. Interpret such actvity and make recommendatons for resoluton.
Research threats and vulnerabilites and, where appropriate, take acton to mitiate threats and remediate vulnerabilites.
GitHub is used to code of hostni platorm for version control and collaboraton
JIRAr/Confuence, Microsof Arzure ArD, LastPass, Gooile Standard suite, Slack, Go to Arssist, AArCE (Patch Manaiement), Arviiilon Video Surveillance, Arspera (IBM), Splunk, ServiceNow
Responsible for security monitorini of networks, websites, applicatons, databases, servers, data centers, and other infrastructures to protect them from cyber threats.
Provide 24/7/365 real-tme monitorini of security tools, dashboards, and email alerts.
Report security incidents usini the ServiceNow tcketni system for events that siinal an incident and require Tier 3 Incident Response review.
Perform triaie on alerts by determinini their critcality and scope of impact.
Investiate, analyze, and process endpoint alerts usini SIEM tools; lireEye HX, McArfee Arntvirus, Cylance, Splunk Enterprise Security (Splunk ES), and OSINT tools.
Review and collect asset data; indicators of compromise, lois, confiuratons, and runnini processes, on these systems for further investiaton and reportni.
Involve in plannini and implementni preventatve security measures and in buildini incident response and disaster recovery plans
Investiate, analyze, and process phishini email alerts from IronPort and lireEye followini standard operatni procedures.
Evaluate and process Web Site Review Requests from internal users to access blocked websites usini OSINT tools.
Arnalyze and resolve DLP alerts from McArfee DLP Manaier and Splunk Enterprise Security (Splunk ES) and escalate cyber privacy incidents to the Privacy Team.
lully document assiined tckets to show all work performed.
Perform Root Cause Arnalysis (RCAr) and make preventatve recommendatons.
Conduct forensics and investiatons as needed usini security tools such as Splunk, lireEye, Cisco IPS, OSINT, etc.
Create, track, and work to resolve Normal and Standard job-related Chanie Requests
Develop and conduct weekly tarietni trainini for the SOC team
Coordinate threat-huntni actvites across the network leveraiini intelliience from multple internal and external sources, as well as cutni-edie security technoloiies
Arssist with the creaton of the daily SOC report and brief customers as necessary
Partcipate in daily security meetnis with other contractor and customer teams
SOP and Run books experiences
Gap: He was looking for a job from Feb 2022 to Aug 2022. UPS- Gaithersburg, MD Jun 2017-Jan 2022
SOC Analyst
Perform daily monitorini and analysis of suspicious email and web trafc and tcketni systems.
Work closely with the Network Operatons Center and Helpdesk to analyze suspicious events, develop security awareness, and remediate incidents.
lully document assiined tckets to show all work performed.
Monitor and identfy security risks to the Company and the relevant technoloiy or behaviors requirini chanie to mitiate those risks.
SOP and Run book experiences
Respond to and, where appropriate, resolve or escalate reported security incidents.
Monitor system lois and network trafc for unusual or suspicious actvity. Interpret such actvity and make recommendatons for resoluton.
Research threats and vulnerabilites and, where appropriate, take acton to mitiate threats and remediate vulnerabilites.
Use Planview sofware to provide a sinile locaton to monitor tme, budiets, and expenses for your projects.
Worked in conjuncton with internal TlS support iroups in maintainini all mission-critcal systems such as Bloomberi, SSL databases, tradini wall content, and mobile solutons.
Responsible for security monitorini of networks, websites, applicatons, databases, servers, data centers, and other infrastructures to protect them from cyber threats.
Provide 24/7/365 real-tme monitorini of security tools, dashboards, and Text, and email alerts.
Report security incidents usini the ServiceNow tcketni system for events that siinal an incident and require Tier 3 Incident Response review.
Perform triaie on alerts by determinini their critcality and scope of impact.
Review and collect asset data; indicators of compromise, lois, confiuratons, and runnini processes, on these systems for further investiaton and reportni.
Involve in plannini and implementni preventatve security measures and in buildini incident response and disaster recovery plans.
Investiate, analyze, and process phishini email alerts from IronPort and lireEye followini standard operatni procedures.
Evaluate and process Web Site Review Requests from internal users to access blocked websites usini OSINT tools.
Perform proactve huntni for threats that may have escaped the monitorini system.
Arnalyze and resolve DLP alerts from McArfee DLP Manaier and Splunk Enterprise Security (Splunk ES) and escalate cyber privacy incidents to the Privacy Team.
Conduct forensics and investiatons as needed usini security tools such as Splunk, lireEye, Cisco IPS, OSINT, etc.
Investiate, interpret, and respond to complex security incidents.
Splunk Cloud experiencen Arrchitect, desiin, eniineer, support, confiure, administer content and maintain infrastructure for a hiihly available and disaster recovery confiuraton
Splunk experiencen Ardminister Splunk and Splunk Arpplicaton for Enterprise Security loi or event manaiement
Expertse with EDR toolsets – administraton, analysis, and inteiratons preferably CrowdStrike
lamiliarity with SOArR Products include Phantom and ThreatConnect
Experience with scriptni (e.i., PowerShell, bash/ksh/sh,python)
Arbility to assist team with Incident response and handlini
Excellent demonstrated experience in communicatni technical informaton to non-technical and technical audiences.
Experience workini directly with senior leadership and manaiement UPS- Gaithersburg, MD Jan 2017-Jun 2017
I- Helpdesk Support Analyst
Provide prompt and appropriate response to phone and e-tcket inquiries and requests for assistance with the associated computer systems; Perform inital problem analysis, triaie, identfy, and troubleshoot customer issues, provide advice and assistance and appropriately refer technical issues to the network team or subject mater experts when appropriate.
Jira is used for the help desk and support tcket system.
Plainview is fexible project manaiement sofware that ioes beyond basic tme-trackini and task manaiement
Provide direct assistance to customers via telephone and email.
Coordinate eforts with staf associates and subject mater experts to resolve problems; maintain liaison with network users and technical staf to communicate the status of problem resoluton; assist with monitorini network manaiement systems.
Use SSL To Help maintain code quality, orianizaton, and automatzaton.
Loi and track each request and appropriate demoiraphic data related to each request.
Arssist with compilini data and preparini reports setni forth proiress, adverse trends, and appropriate recommendatons based on informaton from the Call Manaiement Trackini System.
Arssist with compilini and reiularly maintainini a loi of lrequently Arsked Suestons (lArS) oriiinatni with all cateiories of customers.
GitHub essentals like repositories, branches, commits, and pull requests.
Jira Service Desk is reliable help desk sofware ofered by Artlassian and serves as a place where your customers can report buis, contact you for help, access your knowledie base, and request new chanies.
Arssist with providini and manaiini ofcial answers to all lArSs and distribute the same to all interested stakeholders.
Contribute to the preparaton of procedure manuals and documentaton for help desk use; conduct periodic customer satsfacton surveys and track customer problem trends; make recommendatons for improvements to customer experience and create reports based on informaton provided from customer surveys and trend analyses.
Arssist in the development of a comprehensive help desk trainini plan; assist in trainini personnel who provide backup coveraie and in trainini users related to the operaton and maintenance of systems.
Perform other related dutes includini unlockini user accounts and helpini with password reset support.
Revamped JIRAr instance to meet iroup’s needs in manaiini incident workfows based on service level aireements.