OT Cybersecurity Analyst

Carlos Vieyra

******@********.*** 302-***-**** Wilmington, DE

WORK EXPERIENCE

PBF Energy Oct. 2019 – Present

Senior OT Cybersecurity Analyst

OT Cybersecurity Analyst Parsippany, NJ

Collaborates with enterprise IT and process control OT teams to implement security controls and technologies in order to reduce cyber risk exposure while continuing to support business continuity.

Lead administrator of over 70 virtual and physical Linux systems which host various technologies such as haproxy, squid, dante, cribl, syslog, immutable backup repositories and automated tasks.

Technical project lead for implementing a data pipelining technology responsible for forwarding various logs and event data into CrowdStrike’s Next-Gen SIEM.

Administrator of level 3.5 process control DMZ networks for 7 industrial environments. Responsible for ensuring secure data flow, systems and practices between enterprise IT and process control networks.

Implemented and supported various security technologies, such as NAC, OT based EDR, access management and session management, logging and network device configuration backups and auditing applications.

Configured, deployed and maintained various networking and security devices such as firewalls, switches and routers including supporting technologies such as syslog servers, AAA and network monitoring solutions.

Deployed passive network security and asset management technologies across various sites to gain visibility into OT and SCADA networks.

Delaware City Refining Company Mar. 2019 – Oct. 2019 Information Technology Analyst Delaware City, DE

Network Administration: Configuring and maintaining networking devices such as switches, routers, firewalls, as well as various supporting applications.

Supported data communications projects including fiber installation and testing for the local site and third parties.

Replaced, deployed, and maintained Cisco access, distribution, core switches, firewalls, wireless controllers, access points and point to points on enterprise networks.

Server Administration: Planned and executed various server and application upgrades, maintenance and support, including hardware and software updates, patches as well as firmware upgrades.

Supported and maintained various Windows and Linux servers as well as various 3rd party appliances.

Executed Windows operating system version upgrades throughout the site, upgrading over 400 workstations. Delaware City Refining Company (Contractor) May 2018 - Mar. 2019 Information Technology Specialist Delaware City, DE

Supported and led various system and data communication projects for the local site.

Provided general IT support for a refinery of over 800 employees and contractors, and participated in 24 hour IT support on-call rotations.

Automated sitewide Windows OS upgrades as well as performing manual upgrades on sensitive systems. Applied Card Systems Feb. 2017 - May 2018

Jr. Network Engineer Glen Mills, PA

Supported enterprise networks, while ensuring all work performed met PCI-DSS requirements.

Replaced and configured Cisco and HPE switches, routers, firewalls as well as various networking and telecommunications equipment across the organization.

Redesigned the wireless infrastructure for 8 sites and implemented a more robust Cisco cloud managed solution.

Executed various roles in telecommunications projects across six sites, one of which saved an estimated $35,000 a month. United States Air Force Feb. 2013 - Feb. 2019

Aircraft Fuel Systems Apprentice Course (2A6X4) - (Grad. 2014) EDUCATION

Wilmington University

Bachelor of Science, Cybersecurity New Castle, DE

Graduate Certificate, SCADA Cyber Security (Candidate) CERTIFICATIONS & SKILLS

Certifications/Courses

o Cisco CCNA (Cisco Certified Network Associate) - Verify No.: 4dd8a2bf14f94370baf30132335d3cf8 o CompTIA Security+ - ID: COMP001022443361

o eJPT (eLearnSecurity) - Junior Penetration Tester - ID: 2686841 o Exterro ACE (AccessData) - AccessData Certified Examiner (2016-2018) o CISA ICS Cybersecurity (INL) - Course Numbers 101, 201, 301V, 301L Skills

o Security: CyberArk, Tenable, Crowdstrike Falcon EDR, McAfee/Trellix ePO, ManageEngine, KnowBe4, Cisco ISE, Cisco SNA, OneIdentity, OS patching/upgrades, Vectra NDR, Claroty, Group Policy, Active Directory, DNS, Radius, TACACS+, Proxies

o Networking: Cisco switches, routers, wireless controllers & APs, HPE/Aruba switches, Cisco Meraki o Systems and Virtualization: Windows, Linux (RHEL/Debian based), VMWare ESXi/vSphere, Hyper-V, KVM o Firewalls: Cisco ASA/Firepower, pfSense/Netgate, OPNsense, Sophos, Checkpoint, Fortigate

Contact this candidate