Security Engineer Incident Response

ALBIN JOSE

Philadelphia, PA - Open to relocate

445-***-**** – *************@*****.*** · Greencard Holder PROFESSIONAL SUMMARY

Security Engineer with over 2 years of hands-on experience in IT security operations, risk assessments, and cybersecurity compliance. Skilled in leveraging industry-standard frameworks such as NIST CSF, ISO 27001/27002, and RMF. Proven expertise in deploying and managing endpoint detection and response systems, SIEM, and vulnerability management platforms to secure enterprise assets. Adept at leading incident response efforts, improving security posture, and collaborating effectively with technical and non-technical teams. Experienced with Splunk, CrowdStrike Falcon, Qualys, and cloud security best practices in complex IT environments. WORK EXPERIENCE

SECURITY ENGINEER Jan 2023 - Jul 2024

Veranova

• Collaborated with IT leadership to design and update security strategies aligned with company objectives and best practices.

• Administered the EDR platform using CrowdStrike Falcon, managing event investigations, alert designs, and endpoint agent updates to enhance security visibility.

• Led vulnerability management efforts by configuring and conducting vulnerability scans, generating reports, and coordinating remediation with IT teams.

• Monitored SIEM systems and Azure cloud environment for potential security events, continuously improving Splunk alerts, reports, and dashboards.

• Conducted incident response activities, including minimizing business impact, forensics collection, and providing hardening recommendations.

• Supported risk and audit teams in addressing client inquiries and certification tasks to ensure compliance with security standards.

CYBERSECURITY ANALYST Feb 2022 – Nov 2022 Dow

Chemical

• Administered vulnerability scanning platforms, including Qualys, to detect and remediate potential security gaps proactively.

• Assisted in the configuration and management of firewall policies, MFA, and NAC solutions to ensure robust security controls.

• Collaborated with cloud engineers and operations staff to ensure secure design and implementation of Microsoft Azure solutions.

• Developed and refined processes for monitoring external threat intelligence sources, enhancing threat detection and response capabilities. CYBERSECURITY ANALYST

Tech Twins Dec 2019 - Dec 2020

• Monitored security controls, including SIEM, web content filtering platforms, and identity monitoring solutions, to detect and mitigate threats.

• Administered firewall configurations, VPN systems, and authentication platforms to secure network communications and data access.

• Performed incident detection and response, collaborating with IT operations staff to harden systems and improve incident handling procedures.

EDUCATION

Eastern University

MS in Data Science

GPA 3.8/4.0

Amity University, India

Bachelor of Science in Cyber Forensic

GPA:3.7/4.0

TECHNICAL SKILLS

Security Devices: SIEM (Splunk), Endpoint Detection & Response (CrowdStrike Falcon), Vulnerability Management (Qualys), Firewalls, Intrusion Detection Systems (IDS) Security Operations: Risk Assessments, Incident Response Network Infrastructure: Routers, Switches, Firewalls, TCP/IP, VPN Operating Systems: Windows, Linux

Database Platforms: SQL, Oracle

Security Tools: Nmap, Tenable, Snort, Greenbone Security, CrowdStrike, Microsoft Azure Security Controls: MFA, NAC, Authentication Platforms, Web Content Filtering Compliance & Frameworks: NIST CSF, ISO 27001/27002, RMF Cloud & On-Prem Infrastructure: Familiar with cloud platforms and on-premises security SECURITY CERTIFICATIONS

CompTIA - Security+,

EC Council – Certified Ethical Hacking (CEH)

Contact this candidate