Incident Response Loss Prevention

SUMMARY

Passionate Security Operation Centre (SOC) and Incident Response Analyst with 5-year experience investigating, containing, and preventing network, host, and email-based attacks. Proficient in malware analysis, incident response, data loss prevention, and improving SOC processes by utilizing top industry security solutions.

SKILLS

Malware Analysis/Endpoint Security

Incident Response/Cyber Threat Intelligence

Network Security Protocols/TCP/IP

Nessus/Nmap/Metasploit

Security Test & Evaluation

Splunk, Qradar, LogRhythm/ ArcSight

Wireshark/ IBM Big Fix

PCI-DSS/FIPS/NIST 800 Series

Snort/Firepower/FireEye

Archer/Jira/ServiceNow

CrowdStrike/ McAfee/Bluecoat/FireEye/ Carbon Black

Risk Management/Security Control Assessment

Vulnerability Assessment

Palo Alto/Fortinet/Cisco

Linux/Windows/ Active Directory

Jira/ServiceNow/Confluence/TheHive

NetWitness/IPAM/Veritas

Microsoft Office 356/Sharepoint/OneDrive

VirusTotal, DomainTools, IP/URLvoid, IBM X-Force

Any.run/ThreatGrid/FE AX

ThreatConnect/RecordedFuture

Language: Bash scripting, Python.

Petrel, Power log, Landmark

Email Analysis

Risk Assessment

Data Analysis

PROFESSIONAL EXPERIENCE

DelTaahTech Consulting, MD February 2022 – Present

SOC Analyst

I collaborate with Legal and Loss Prevention teams within SOC environment to manage tier 1 and 2 security incidents, providing investigation findings to relevant business units to enhance information security posture.

Proactively managing incidents to minimize customer impact and meet SLAs, I compile and analyze data for management reporting and metrics, utilizing threat intelligence to initiate investigations and identify malicious activity.

I actively participate in large-scale cyber breaches, managing incident response workflow and activities, while also enhancing workflow processes and driving incident response and mitigation efforts. Additionally,

I provide training and mentoring to junior IR team members, communicate incident response actions to technical and non-technical management, and assist in creating and updating SOC runbooks and playbooks.

Utilizing various security tools and platforms such as SIEMs, endpoint protection solutions, and network analysis tools, I perform thorough investigations, analyze network traffic, prioritize intrusion attempts, and develop follow-up action plans to resolve security issues.

DeltaahTech Consulting, Washington D.C. Feb 2019 – January 2022

SOC/ Cyber Analyst I

I collaborated closely with the Computer Incident Response Team (CIRT) in a Security Operations Center (SOC) to analyze, respond to, and mitigate security events within the environment.

I created and updated SOC run books/playbooks, investigated email attachments and links for malware, and identified process efficiencies.

I performed real-time monitoring of various devices, analyzed threat patterns, and provided in-depth cybersecurity analysis to troubleshoot incidents.

I managed systems associated with Identity and Access Management (IAM), proactively searched for undetected threats, and reported on security issues while sharing information with other teams for improved security measures.

ADDITIONAL SKILLS

Ability to work under pressure and learn very fast on the job.

Adaptability – can adapt to changes and multi-task.

Proactive and tactful in resolving issues.

Dedicated leadership skill.

Team management skill.

Time management skill.

Strong communication skill.

Commitment to customer satisfaction.

TRAINING

Participated in 2023 and 2024 Collegiate Cyber Defense Competitions.

Participated in 2023 Capture the Flag competition.

Participated in 2024 Mid-Atlantic 2-year Cyber Defense Competitions.

Participated in 2024 2-year Collegiate Cyber Defense Finals Competition.

Completed Introduction to Data Science course on Cisco Networking Academy.

EDUCATION & CERTIFICATIONS

University of Maryland Global Campus Adelphi, Maryland

Masters of Science: Cybersecurity Management & Policy Ongoing

Community College of Baltimore County Baltimore, Maryland

Associate of Applied Science: Cybersecurity

CompTIA Sec+ Certified

PMI Member – ID: 7440591

Contact this candidate