Network Security Incident Response

Adam Ferdman

San Diego, CA ****.*******@*****.*** 925-***-**** LinkedIn www.linkedin.com/in/adam-ferdman23 SUMMARY

Cybersecurity professional with hands-on experience in network security, penetration testing, and incident response. Led projects improving threat detection by 70% and reducing response time by 50%. Drove security management for a law firm, reducing breaches by 30% and enhancing data protection by 85%. Accelerated revenue growth by 25% and expanded product offerings by 40% at a prominent tour company. CERTIFICATION & SKILLS

Certifications: CompTIA Security +, Cloud Security, Network Security, Microsoft Security, Linux Security, Offensive Security and Ethical Hacking, Cyber Infrastructure and Technology, DFIR and Threat Hunting, Python Operating systems: Windows Client, Windows Server 2012, Mac OS, Linux Networking: VLANs, ACLs, Cisco static routing, subnetting, TACACS+, RADIUS, DHCP, IoT, EAP, AES, Programming languages: Python, PowerShell

Tools: Splunk, ELK, Qradar, Wireshark, Snort, Zeek, pfSense, Nessus, OpenVAS, Metasploit, Burp Suite, Nmap, OWASP ZAP, CrowdStrike Falcon, Carbon Black, Microsoft Defender ATP, EnCase, FTK, Volatility SIFT, Azure AD, Okta, AWS, Azure

PROFESSIONAL EXPERIENCE

• Achieved and maintained full compliance with all relevant regulations and industry standards, ensurign the highest levels of data integrity and client confidentiality.

• Safeguarded sensitive client data, implementing advanced security measures to protect against potential breaches.

• Conducted regular assessments to identify hundreds of cybersecurity risks and vulnerabilities, reducing potential breaches by 30% within the law firm's IT systems, networks, and databases.

• Prioritized and analyzed the impact of identified risks based on severity and potential impact, leading to a 25% reduction in high-risk vulnerabilities.

• Developed and implement comprehensive cybersecurity policies, procedures, and best practices tailored to the specific needs and compliance requirements of the law firm, achieving a 40% improvement in overall security posture.

• Trained all employees in security protocols and enforced adherence to policies, leading in a 20% reduction in security incidents caused by human error.

• Directed the implementation and maintenance of security technologies, including firewalls, antivirus software, intrusion detection systems, and encryption tools, enhancing threat detection and response capabilities by 55%.

• Monitored security systems for suspicious activities and promptly responded to security incidents or breaches, reducing incident response time by 50%.

• Executed measures to safeguard client confidentiality and sensitive information—utilizing encryption, access controls, and secure data storage practices—achieving an 85% improvement in data protection.

• Delivered ongoing security awareness training to all employees, including attorneys, paralegals, and support staff, driving a 95% increase in overall security awareness.

• Established comprehensive vendor security protocols and contractual agreements, safeguarding firm information assets and reducing vendor-related security incidents by 50% within the first year.

• Led operations and significantly enhanced the management of tours and ticketing services for a leading tour company.

• Developed and implemented business strategies, driving a 25% year-over-year revenue growth.

• Forged partnerships with major hotels, tour companies, national parks, and attractions to expand the com- pany's product offerings by 40%.

• Collaborated with a team of 30+ employees, helping to achieve 95% of customer satisfaction.

• Executed marketing strategies, including social media campaigns, resulting in 40% increased online book- ings.

• Negotiated contracts with suppliers, driving a 12% cost reduction while upholding service quality.

• Developed an online booking platform, boosting customer self-service transactions by 45%. WORK HISTORY

• Name of Employer, Nowzaree Law, P.C. Irvine, CA October 2022–June 2024 Job Title: Cybersecurity and Information Security Manager.

• Name of Employer, Platinum Tours and Tickets, LLC Lake Forest, CA October 2011–December 2020 Job Title: Operations Assistant.

EDUCATION

San Diego, CA, San Diego State University, Cyber Security Program. February 2023 – December 2023 Courses: Microsoft Security, Network Security, DFIR and Threat Hunting, Linux Security, Networking, Python, Cloud Security, Offensive Security and Ethical Hacking, Cyber Infrastructure and Technology, Game Theory. University of Tel Aviv, Coller School of Management Tel Aviv, Israel, Bachelor of Business Management Courses: Accounting, Entrepreneurship, Marketing management, Project management, Leadership, Marketing, Finance, Business foundations.

PROFESSIONAL PROJECTS March 2022 – August 2024

Elastic Stack SIEM Configuration and Management: Configured Elastic Stack SIEM, deploying a Kali Linux VM and Elastic Agents for log collection and security event monitoring.

Visualization and Alerting in SIEM: Created custom dashboards and alert rules in Elastic SIEM for security event visualization and proactive incident response.

Network Security Assessment: Executed in-depth evaluations of network security vulnerabilities, utilizing advanced scanning techniques to identify open ports and potential entry points, and developing sophisti- cated mitigation strategies to enhance network defenses by 40%.

Security Architecture Design: Engineered secure architectural solutions for applications, systems, and networks, implementing principles such as defense-in-depth, least privilege, and robust cryptographic controls to improve systemic resilience against threats by 30%.

Configuration of Security Controls: Implemented and fine-tuned advanced security controls, including honeypots, data loss prevention systems, mail security solutions, and Splunk SIEM, improving threat detection capabilities by 70% and optimizing incident response times by 33%.

Network Security Diagnostics: Conducted comprehensive security diagnostics on Cisco devices by evaluating ACLs, port configurations, and implementing robust encryption standards; enhanced network availability to 99.9% and fortified data integrity.

Forensic Investigations: Initiated and conducted forensic investigations using SIFT Workstation and Flare VM, systematically acquiring and analyzing threat data, and preserving critical malware information using CAINE for in-depth analysis.

Contact this candidate