Nsikan S. Nkordeh ady5ol@r.postjobfree.com 302-***-****

Summary Of Qualification:-

Seasoned Information Security Analyst with seven years experience in Cloud Security, Risk management, Incident Response, Vulnerability & Threat Analysis, Project management, technology implementation.

Track record in coordinating with technical teams and third-party agencies to perform comprehensive security audits and achieve compliance with industry regulations and security standards.

A strong history of leading cloud deployments and security assessments. Experienced in developing and maintaining network security protocols for enterprise organizations.

Extensive knowledge of AWS cloud security best practices, architecture, and services. Strong understanding of security concepts, including network security, identity and access management (IAM), encryption, and vulnerability management.

Skills

•

Linux Shell Scripting & administration

Microsoft Azure Active Directory

Microsoft Office 365

PowerShell Scripting

Cybers security Processes Controls and frameworks: NIST, ISO, CIS, SOC2

Intrusion detection & Prevention

AWS & Azure

Network security control

Data Analysis

Network Monitoring Systems

Operating Systems Vulnerabilities

Security Management Frameworks

Data analysis

Microsoft Office

Governance, Regulation and Compliance (GRC) approach to Cyber security management

SIEM Product: Splunk, IBM QRADAR, AlienVault, LogRhythm

Risk Management

CERTIFICATIONS

IBM Certified Security Intelligence Specialist (QRADAR)

IBM certified Application Security Specialist (AppScan)

Education:-

M. Sc. in Business Analytics and Information Management Feb. 2020 – Dec. 2021

University of Delaware, Newark, DE

M.Sc. in Wireless Networks Aug. 2005-Dec. 2006

Queen Mary University of London, UK

B.Sc. in Electrical and Electronics Engineering Dec. 1997 -Dec. 2002

University of Lagos, Nigeria

Professional Experience:-

Cyhornet LLC, New York August 2022- Till Date

Cyber Security Engineer

I coordinate with the IT Director and security teams to develop and maintain IT security policies like NIST, SOC1 & SOC2, architecture, and security across the organization, including performing audits of security systems to maintain compliance with standards and protocols. Develop cybersecurity policies that confirm to NIST framework

Network Monitoring: Proficient use of Splunk for network monitoring, log gathering and detection; I monitor all connected network points, analyze network logs for vulnerability and breaches.

I work as a System Administrator using Microsoft Azure, Azure Active Directory, and office 365 for administrative IT task like creating/deleting accounts, granting privileges, and for IT security issues like threat monitoring, compliance using tools like Microsoft Defender and Microsoft Sentinel

Incident Response: I coordinate the incident response process among the Cyber Defense, SOC, Legal, and Architecture teams, providing technical leadership for effective resolution.

I play a pivotal role in identifying deficiencies in processes and tools, recommend security controls and/or corrective actions for mitigating technical and business risk.

Collaborated with the IT team to design and implement secure AWS cloud architectures, following industry best practices and compliance requirements.

Developed and implemented IAM policies, roles, and groups to ensure least privilege access control for AWS resources; Implemented network security controls such as security groups, NACLs, and VPC peering to protect AWS infrastructure from unauthorized access.

I led the development and implementation of security requirements for various IT projects, including system migrations to compliant environments.

I developed security plans for technology implementations, coordinated with the IT department to create security controls, and performed audits to ensure compliance.

Provide subject matter expertise to project teams for cloud and on-site deployments, including developing system security plans, conducting testing on security controls, and performing vulnerability assessments to ensure HIPAA compliance.

I take part in designing and implementing an overall risk management process for the organization, which includes an analysis of the financial impact on the company when risks occur.

I analyze logs from SIEM solutions like IBM QRADAR & Alien Vault

CG Global Management Solutions, LLC, Philadelphia, PA March 2021 – July 2022

Cyber Security Engineer

I was involved in cyber security Incident response and detection using SIEM solution like Alien Vault, SolarWinds & LogRhythm.

Responsible for identifying external and internal threats, investigating and documenting security incidents.

I Performed security system updates on a regular basis with associated technical documentation.

Resolved all fraud and virus infections in coordination with computer security incident response teams.

Resolved all fraud and virus infections in coordination with computer security incident response teams.

Detailed security knowledge including technologies such as Malware, Network Intrusion Prevention, Security Information Event Management systems.

Project Lead for updating, enforcing, and auditing security policies, procedures, and SOP's to ensure compliance and accuracy with our current security architecture.

Perform threat analysis in a 24/7 environment, mitigating and managing threats and risks.

Performed security system updates on a regular basis with associated technical documentation Install and operate firewall and data encryption software to protection sensitive business information.

Generate weekly reports to document new security implementations.

TEACHING & RESEARCH EXPERIENCE Oct 2013 – Feb 2020

Covenant University, Nigeria

IT Security Researcher (Cybersecurity Engineer) & Lecturer

Used Event Tracker log management tool to detect real-time security alerts and information events by analyzing the data and detect to respond to any security breaches or vulnerabilities.

Used IBM AppScan for web and application.

Installed and configured test environment for the research and development of various open-source security solution tools that were evaluated for increasing the company’s security posture.

Lead the research and evaluation of emerging security technology, and industry and market trends to assist in project development and prioritization.

Experienced with DLP, Bluecoat web sense, Proofpoint, Trend Micro and IBM QRadar Enterprise SIEM security tools to monitor network environment.

Conducted security control Assessment to assess the adequacy of management, operational, privacy, and technical security controls implemented.

Experience setting up Firewalls, using NAV tools, Vulnerability Management platforms, Security Analytics Platforms, Penetration Testing frameworks (Metasploit or Resolve).

Use IBM QRadar Security Manager to identify threats and assigned category.

Perform Cyber assessments as required by the NRC/ FERC/ NERC mandated cyber security programs (with NEI/ NIST/ FIPS).

Dans Josoy Concept Mar 2012 – Sept20 13

Senior IT Security Engineer

Perform problem management and incident post-mortem activities to ensure follow up actions and process improvements are continually being performed.

Responsible for periodic IT audit of the Company’s IT infrastructure; ensuring IT systems meets best practices.

Performed security system updates on a regular basis with associated technical documentation.

Design and formulation of IT policies and IT Security Intelligence

Performed information security audits of sensitive IT systems for compliance with COV ITRM IT Security Policy SEC500-02, NIST standards, and ITRM IT Security Standard SEC501-07.

.

GSM Systems Ltd. Sept 2010 – Jan 2012

IT Program Manager

Lead the research and evaluation of emerging security technology, and industry and market trends to assist in project development and prioritization.

Responsibilities include leading a team to develop and manage security for multiple very complex IT functional areas (e.g., data, systems, network and/or Web) across the enterprise. Lead team in the development and implementation of security policies and procedures (e.g., user log-on and authentication rules, security breach escalation procedures, security auditing procedures and use of firewalls and encryption routines)

Detailed security knowledge including technologies such as Malware, Network Intrusion Prevention, Security Information Event Management systems.

Network dimensioning of Airtel installed based for spares allocation.

Managing field maintenance operations which include about 30 field Engineers.

De-installation and deployment: project managed de-installation of BTS & RF radios.

HUAWEI Technologies Ltd, Lagos Nov 2009 – Sept 2010

IT Security Manager

Responsible for identifying external and internal threats, investigating and documenting security incidents.

Perform threat analysis in a 24/7 environment, mitigating and managing threats and risks.

Install and operate firewall and data encryption software to protection sensitive business information.

Generate weekly reports to document new security implementations.

ERICSSON, Nigeria. Jun 2008 – Oct 2009

IT Solution Manger

Participated in validation of security controls for mitigation of risks on Cisco and Juniper routers.

Participated in root cause analysis, risk identifications and software tool development.

Reviewed and maintained network architecture components and systems.

Reviewed and maintained network architecture components and systems.

Establish effective communications and working relationships with software development, hardware engineering, and cyber security engineering teams to facilitate effective and timely completion of project milestones.

Good knowledge/experience with scripting languages (e.g., PowerShell/Python)

Contact this candidate