Cyber Security Analyst

John Paoline

*** *. ******* **** #** ~ Glendora NJ 08029 ~ 267-***-**** ~ *************@******.**

KEY QUALIFICATIONS

Technical Certifications ITIL Foundation, Security+, Project+, Telecom CTA, Telecom CTNS, MCTS, Network+, MCSA, Server+, A+, Microsoft Specialist, MCP, Key member in Cyber Security, Information Assurance, ISSO Support, CDM, NIST, RMF, DIACAP, IA Controls, Zero-day, Vulnerability Scans, Penetration Tests, Wireshark, Metasploit, Nmap, Bitbucket, GitHub, OneDrive, Kali Linux, Windows, PowerShell, eEye Retna, Tenable Nessus, Port Scanner, Hardening systems, Hardening and Administrating Intranet sites and Websites, Acunetix, Jira, vSphere, Virtual Machine, SharePoint 365, OpenText, Cisco Duo MFA logins, Patch Maintenance, Remediation Tools, ManageEngine Endpoint (Desktop) Central, Phosphorus, BigFix, DISA Gold Disk, Guardian Edge Encryption, Symantec Endpoint Protection, CrowdStrike, Trend Micro, Symantec Antivirus, Windows Defender, Visio support, Network support, Desktop support, End user support, Hardware support, Software support, DHCP, Active Directory Administration, On site and remote Technical Trainer, Video training development, Video Capture software, PowerPoint, Knowbe4 Cyber Security Awareness Training, Knowledge Base Development, Documenting Cyber Security Policies and Procedures, Tech Note development, Help Desk Case Logging, OneNote, Jira, PlexTrac, Splunk, Spiceworks, Track It, HP Service manager. IT Project Management, Microsoft Project, Customer service, Establishing Stakeholder relationships. Hardware and Software inventory, Disaster Recovery, Data Storage, Clusters, Backup Exec, Advanced backline support, Q&A Development. Professional Experience

Cyber Security Analyst Jun 2024 – Jun 2025 Government Contractor Quecon

Client: Federal Aviation Administration Egg Harbor Twp, NJ Position Cyber Security Analyst / Jr Penetration Tester

• Conducted Penetration Tests credential and non-credential scans using Nessus

• Involved in creating and presenting Penetration Test Plans and Kick-off meetings

• Participated in Red and Blue team Capture the Flag Penetration Testing events

• Performed network vulnerability scans and monitoring using Nessus and Phosphorus software

• Performed Intranet and website vulnerability scans using Acunetix

• Remediated vulnerabilities using BigFix software

• Patched all lab systems every Patch Tuesday using BigFix software

• Supported and resolved all BigFix software issues, creating user accounts, reset user passwords, upgraded compliance, maintained the updated console version, created and ran web reports, inventory, and compliance imports

• Administrated Phosphorus software, creating user accounts, keeping all patches and version updated.

• Created and monitored tasks with Jira and PlexTrac software

• Performed and reported FAA lab name findings of monthly web and AI searches

• Attending CompTIA PenTest+ certification training

• Attended monthly Elms eLearning training

Cyber Security IT Specialist May 2017 – Feb 2024 the State of New Jersey, Burlington County, NJ

• Hands on experience developing, patching, and hardening The State of NJ Pinelands Commission intranet site utilizing SharePoint components including, forms, templates, custom lists, web parts, master pages and content management

• Responsible for The State of NJ Pinelands Commission website updates using OpenText

• Implemented and maintain MFA(2FA) user logins with Cisco’s DUO on all laptops, workstations, and servers at the New Jersey School Insurance Group

• Key member in Cyber Security and Network Administration at the New Jersey School Insurance Group

• Assisted with Penetration testing

• Supported CrowdStrike, Windows Defended, Trend Micro and Symantec Antivirus

• Vulnerability Network Scanning, Patch Maintenance hardening systems

• Presented and implemented new Cybersecurity tools to our environment

• Providing end user Cyber Security Awareness training using KnowBe4

• Built and maintain multiple Knowledge Bases that includes Policies, Procedures, Tech Notes, Company Policy, Cyber Security Awareness training, hardware, software, and Help Desk Case Logging using OneNote, SharePoint. Jira, Splunk, and Spiceworks

• Performed information assurance scanning and vulnerability remediation Network security Information using Desktop Central

• Supporting over 120 user desktops

• Technical trainer and development of end user training videos in NCH video capture software and MS PowerPoint 365 Providing on site classroom, remote and video training involving video and PowerPoint

• Administration skills on messaging and collaboration tools such as Skype, Teams, and Zoom

• In charged of all Telecommunications specialist duties

• Assistant role to the Communications Specialist

• Installing, upgrading, and configuring all Windows server and client operating systems

• Supporting switches, firewalls, host bus adapters, network attached storage, tape libraries, uninterruptible power supplies, patch panels, fiber, Cat 5, and Cat6 wiring IA Analyst Jul. 2009 – May 2017 Government Contractor KForce Oct 2011 – May2017

Client: Drug Enforcement Agency Philadelphia Division Position IA Support Technician

• Ran daily vulnerability scans

• Performed vulnerability remediation via DISA Gold Disk, Hercules, and Microsoft WSUS security updates

• Used HP Service manager for ticket processing creating cases and using it as a Knowledge Base

• Creating Plans of Action & Milestones to track the mitigation of system-level weaknesses

• Reporting security incidents

• Provided Desktop support for the Firebird and standalone internet networks

• Performing audits of database patching, updates and scans

• Configured encryption to all workstations with Gurdian Edge and Bit Locker

• Server administration software HP array configuration utility, and Dell open manage server

• Supporting Microsoft terminal and Citrix servers TCS July 2010 – Aug 2011

Client: US Army Ft. Belvoir VA

Position IA Support Technician

• Ensure networks and systems being developed implement DoD baseline IA Controls

• Performed information assurance vulnerability scans using eEye Retna

• Performing vulnerability remediation using DISA Gold Disk, Hercules, and Microsoft WSUS

• Provided desktop support to the standalone Internet, Sippernet and Nippernet systems McKean Defense Group July 2009 – July 2010

Client: Naval Surface Warfare Center Carderock Division Position: IA Support Technician

• Served as a Liaison for Code 60 under the guidance of the Code 60 Information Assurance Officer

(IAO)

• Supported the Code 60 IAO in developing Information Assurance Policies & Procedures including Security Awareness Training Presentations

• Assisted Code 60 IAO in conducting IA Awareness Training and making sure all Code 60 personnel were compliant with NAVSEA, DON and DoD Information Assurance policies and procedures.

• Assisted in implemented access controls and other security controls on systems connected to the RDT&E network

• Performed vulnerability scanning using eEye Retina.

• Performing vulnerability remediation via DISA Gold Disk

• Creating Plans of Action & Milestones to track the mitigation of system-level weaknesses. Advanced Technical Support Engineer Nov.2005 – Jul. 2009 Symantec Software, Heathrow, FL

• Supported and tested Backup Exec and BE Continuous Protection Server

• Provided extraordinary customer service supporting Symantec Software in a call center environment

• Provided Tier 3 technical support debugging and analyzing various software logs

• Tested software in a Q&A Developer role

Project Manager, Network Administrator Mar. 2004 –Nov. 2005 BB&D, Philadelphia, PA.

• Provided full desktop and network support for the accountant firm Briggs Bunting and Dougherty

• Used Track-It to manager ticket processing creating cases and using it as a Knowledge Base

• Key member of IT Projects and Product Management using Microsoft Project to manage estimation and planning Education

Pennco Tech Diploma, Auto Technology- 1995

Burlington County College Microsoft Certified Systems Administrator- 2003 Penn Foster College Associate in Computer Information Systems- 2019

Contact this candidate