Juan Carlos Sosa
Las Vegas, NV *****
702-***-**** **********@*****.***
Linkedin: JuanSosa98
Summary
An ambitious and results-driven graduate of Flatiron School with more than 450 hours of classroom and lab experience in: hunt analysis, network security, systems security, governance, risk and compliance (GRC), strategy/analysis, threat intelligence and log detection. Brings a strong interest in threat detection as well as experience in supporting customers. Interested in bringing these skills to add value to the Industry.
Qualifications
●Bilingual in English and Spanish, working knowledge of Latin
●Unix/Linux: Vi Editor, Network Traffic Packet Capture, hardware setup and troubleshooting, Network Router and Firewall configuration, Network switch configuration
●Compliance Regulations with GDPR
●IT experience including system, network, cloud, and security administration.
●Cybersecurity experience, especially with vulnerability scanning tools
Recent Training
Cybersecurity Analytics Program, Flatiron School, Online
Includes over 400 hours of classroom and lab-based training in the following:
●Governance, Risk and Compliance (GRC) - Frameworks, Tools, Artifacts (Strategy, Policies, Standards, Guidelines and Procedures), Risk Management, Business Continuity, Incident Response; Plans and policies concerning GRC requirements including HIPAA, PCI-DSS, NIST 800-53, FedRAMP, Cyber Kill Chain, and FISMA
●Networking - OSI & TCP/IP Models, Hardware, Routing, Protocols, Encapsulation, Framing, NAT Networks, VLANs
●Network Security - Wireshark & Wireshark Filters, Port Forwarding, VPNs, Port Scanning, Bind & Reverse Shells, IDS/IPS, Firewalls and WAFs, Rule Writing, Vulnerability Management, MITM Attacks, DNS Security
●Logs and Detection - SIEMs (Splunk), IoCs, Log Types, Databases, Normalization, Regular Expressions (RegEX), Hunting, Alarms & Reports, Investigations, User and Process Monitoring
●Threat Hunting: Threat identification, Surveillance, Data and Tracking
●Threat Intelligence : Knowledge and identification of Threat Actors including APT’s.
●Cyber Threat Intelligence (CTI) Sources and Methods, Social Engineering, CTI Cycle and Process, Cyber Kill Chain, CTI Diamond Model, Cyber Mission Analysis.
●Strategy and Analysis - Strategic Planning, Leadership, Operational Design, Decision Making Cycle
●Systems Administration - Windows, Unix/Linux, VMs, Memory, Storage, Python, Cloud
●Systems Security - OWASP Secure Coding Practices, Input Validation, Session Management, Encoding, Debugging, Buffer Overflows, Hypervisors
Labs/Projects
●Experience handling security incidents, to include reviewing raw log files, data correlation, and analysis
●Actively hunted for and dissect previously unidentified threats in the environment using Splunk, WireShark, Netcat, and Nmap/Zenmap applications
●Gained experience with and thorough understanding of attack vectors, threat tactics, and attacker techniques
Other Experience:
Retail Sales Associate, AT&T November 2020 - Current
●Executed and Maintained monthly sales goals
●Provided IT solutions
Manager, TPLV, NV June 2019 - December 2019
●Oversaw daily operations
●Increased Revenue & Sales
Retail Sales Associate, MetroPCS
December 2017- July 2019
●Sold cellular devices
●Provided IT solutions