Cloud Security Vulnerability Management

Professional Summary

Accomplished Cybersecurity Engineer with deep expertise in network and cloud security, focusing on vulnerability management. Proficient in using Microsoft Sentinel for SIEM, skilled in KQL, and adept at configuring firewalls to bolster security. Innovatively protects critical data against evolving threats, ensuring robust organizational defense.

Technology Tools and Skills

Azure Cloud

Network Security

Zscaler

SIEM (Microsoft Sentinel)

Azure Environment Configuration

Network Protocols and Technologies

Qualys VMDR

Vulnerability Scanning and Management

Intrusion Detection Systems

Identity Access Management

Compliance (NIST 800-53, PCI-DSS)

Threat Intelligence Analysis

Professional Experience

Information Technology Technician Footlocker Jan 2024 - Present

Developed and shared custom ServiceNow filters to enhance inventory visualization, significantly boosting our asset management efficiency and team collaboration.

Spearheaded the re-imaging of IT assets, including Red Hat Linux, Dell, and Lenovo systems, streamlining the deployment process for international operations and enhancing equipment lifecycle management.

Delivered expert level 3 technical support for Foot Locker's POS systems, implementing robust solutions that improved system reliability and customer satisfaction by effectively diagnosing and resolving recurring issues.

Managed over 150 weekly support tickets using Soti Inventory Endpoint Tracking Software, enhancing remote code execution and support processes for handheld inventory tracking devices, thereby optimizing operational response times and service quality.

Cloud Security Engineer Noveo Sep 2023 – Jan 2024

Developed and implemented advanced tracking solutions in Microsoft Sentinel to visualize and monitor malicious activities globally, enhancing situational awareness and response capabilities.

Orchestrated a robust, multi-platform identity verification system that drastically improved security controls and user access across various operating systems, leveraging cutting-edge integration techniques.

Masterfully configured firewall rules to maximize network traffic efficiency and heighten data security across diverse systems, successfully thwarting unauthorized access and deterring malicious IP addresses.

Engineered and managed an Azure Honeynet to identify and report emerging cybersecurity threats, significantly enhancing threat intelligence contributions to abuseipdb.com.

Expertly modeled and analyzed network traffic using GNS3 and Wireshark, providing critical insights into data flow and security vulnerabilities.

Achieved a top-three finish in the Project Ares Cyber Range competition, excelling in Blue Team missions under time constraints, demonstrating superior cyber defense skills.

Set up network security groups to enable comprehensive vulnerability scans with the Qualys Virtual Scanner Appliance, integrating advanced scanning capabilities into network defenses.

Logistics Associate Western Power Sports May 2019 – Jul 2022

Spearheaded comprehensive workflow optimizations across all departments, implementing strategic changes that resulted in a notable 15% boost in productivity, enhancing overall operational efficiency and team performance.

Projects

Incident Response and Qualys Vulnerability Management Oct 2023

Developed and executed a comprehensive incident response plan for 13 incident types, including privilege escalation, malware detection, and brute force attacks across multiple platforms. Created robust vulnerability management policies addressing high-profile threats like Stuxnet and SolarWinds, demonstrating advanced technical writing and strategic planning in information security.

Azure Environment and Honeynet Implementation Dec 2023

Led the implementation of the Azure Environment and Honeynet, enhancing internet communications and centralizing diverse system logs into a Log Analytics Workspace. Utilized custom KQL queries within Microsoft Sentinel to effectively track and visualize global cyber threats, significantly improving threat detection and response capabilities.

Certifications

CompTIA Network+

Qualys File Integrity Monitoring Certified

Qualys CyberSecurity Asset Management Certified

Qualys Endpoint Detection and Response Certified

Qualys Vulnerability Management Detection and Response Certified

Education

Bachelor of Science in Computer Science

Millersville University, Millersville, PA

Contact this candidate