It Support Fraud Analyst

Everett Starling II

***** ** ***** ******, ******, WA, 98092

*********@*****.***

Cell # 229-***-****

Career Objective

Seeking a position with a progressive company in the field of IT Support, Networking, Cyber Security, and System Administration.

Education

Bachelor of Science – Computer Science Mathematics Emphasis, Graduated May 2018, Albany State University, Albany, GA

●Penetration Testing: Kali Linux, Metaspliot, Nmap, Nessus, OpenVAS, Core Impact, IBM AppScan, BurpSuite Pro, WebInspect, Dirb, Nikto, Powersploit, Powershell Empire, HP Fortify, Whois, DNSMap, Hping3, xp0f, netcat, telnet, Retina, GFILanguard, Critical Watch, Nikto, OWASP Zap Proxy, Exploit-DB, IDA Pro, Immunity Debugger, gdb, OllyDbg, Ghidra, Responder, mimikatz, Wireshark, tcpdump, objdump, aircrack-ng, recon-ng, JTR, Maltego, dnswalk, sqlmap, iLSpy, Hydra, unix-priv-esc, linux-privesc, lynis, yersinia, dotdotpwn, yersinia, cowpatty, GISKismet, wifite, reaver joomscan, websploit, wpscan, Armitage, BeEf, exploitdb, commix, RouterSploit, Putty, MobaXterm, wifite, aircrack-ng

●Endpoint/Network Security: CrowdStrike, Carbon Black, Splunk, McAfee ePolicy Orchestrator, Trend Micro Email and Web Gateway, Symantec DLP and Cloud Workload Protection, Imperva NAC, Checkpoint UTM, PFSense, Squid, Snort, IBM Database Activity Monitoring, QRadar

●Database Technologies: Microsoft SQL, Oracle DB, PostgreSQL, MySQL, SQLite

●SIEM and Log Management: OSSEC, OSSIM, AlienVault SIEM, Splunk, Snort

●Software Development: Programming (ASP.NET framework, Java Spring Framework, Flutter/DART, PHP, C#, C, COBOL, HTML), Scripting languages (Perl, Python, Unix Shell script, Ruby, Powershell, Windows Batch, Javascript, Assembly),

●Attack Playbook: Advanced Threat Analytics - Attack Simulation Playbook

●Server Technologies: Windows, Linux, UNIX, BSD, MAC OS, OS400, Active Directory

●Cloud Computing: Microsoft Azure, AWS

●Hardening standards: CIS Benchmark, NIST, STIG

●Containerization and Virtualization: Hyper-V, VMWare, VirtualBox, Docker, Kubernetes

●Standards and Regulations: ISO27001/27002, PCI DSS, HIPAA, NIST, SOX, GDPR

RELEVANT EXPERIENCE

Penetration Testing (5+ years)

●Responsible for Australian most well-known digital banking solution, CommBiz.

●Performed penetration testing and vulnerability assessment against the bank’s infrastructure technologies including: web-based applications, thick-client applications, web/application servers, database servers, and containers (docker) including legacy systems such as AS400.

●Performed source code review of critical business applications and host configuration review of critical assets.

●Identified weaknesses, exploit vulnerabilities and recommend controls to reduce the impact of attacks including privilege escalation, password cracking, remote code execution and information disclosure.

●Simulated real-world attack on critical assets and systems, and identify, analyze and interpret the generated system, security and application logs as a result of the attack in order to provide sound and actionable detection and remediation of actual threats.

●Worked hand-in-hand with the Blue Team in performing Purple-teaming activities to order to improve overall threat detection and assess the suitability and effectiveness of security solutions deployed to the bank leveraging the Incident Response Playbook (Malware Outbreak, Phishing, Data Theft, Denial of Service, Unauthorized Access, Elevation of Privilege, Root Access, and Improper Usage) and Attack Simulation Playbook (ATA).

●Performed system hardening using CIS Benchmark and STIG hardening guidelines on lab virtual servers to validate the effectiveness of the recommendation provided to stakeholders to fix identified security misconfigurations.

●Assessed the control effectiveness of Cloud security solutions such as Symantec Cloud Workload protection solution using MITRE ATT&CK framework and created an executive summary report to outline the test results to executive leadership.

●Created scope of work, organized kick-off meeting, effort estimation, peer-review of reports, delivered test results to key stakeholders and conducted recurring remediation close-out meetings for all penetration testing activities.

●Created Powershell scripts to automate auditing of windows servers, web server configurations, databases, and Bash shell script to audit linux servers and docker containers, python script to perform static analysis of iOS and android mobile applications.

Work Experience

RMS/Dell Corporation, Auburn, Washington, IT Support Workload Manager (Boeing Contractor) April 4, 2022 to current

●Responsible for distributing work among RMS IT Support team members globally.

●Responsible for updating database tracking utilization and performance for accurate task completion.

●Provide status updates to field technicians as well as scheduling, rescheduling, and canceling assigned tasks.

●Provide field tech support in maintaining, supporting and upgrading and re imaging new computers as needed

Scope Services, Inc, Redmond, Washington (Smart Meter Installer) June 2021 to April 1, 2022

●Removing existing meter device and installing new smart meter

●Carrying out tests to make sure the meter is working properly

●Provide general energy efficiency advice and information to customers

Allied Universal, Security Guard, Seattle, Washington, October 2020 – March 2021

●Patrol assigned sites and observed and reported activities and incidents at an assigned client site, providing for the security and safety of client property and personnel

●Preserves order and may act to enforce regulations and directives for the site pertaining to personnel, visitors, and premises

TSYS/Global Payments - Fraud Analyst, January 2020 – August 2020

●Monitor real time queues and identify high risk transactions within the business portfolio

●Observe customer transactions to identify fraudulent activity such as account take over, friendly fraud, theft and similar other risks

●Identify fraudulent transactions and cancel them from further processing

●Resolve queued transactions within the service level agreements to reduce potential revenue losses

●Interact with banks and customers to validate information and to confirm or cancel authorizations

●Resolve customer issues within the scope of existing service level agreements

Foodland (Accountant/ Auditor) (2019-2019)

●Prepares asset, liability, and capital account entries for over a hundred Foodland stores

●Identify successful bank account transactions

●Maintains accounting controls by preparing and recommending policies and procedures

●Prepares special financial reports by collecting, analyzing, and summarizing account information and trends

●Sort, copy, audit, document and adjust coupons on daily records

MDX Hawaii Medical Data Exchange (Data Management Operation) 2018 – 2019

●Send and receive tasks/claims to the company’s health providers through CORE database

●Document patients that are active with insurance, not active or doesn’t exist

●Handle personal information

●Identify clients and their providers

●Identify malicious emails

●Transfer documents into CORE database

Contact this candidate