Cybersecurity Advisory Analyst - OT/IoT Security

TORRIE N. YORK

Houston, TX 832-***-**** **********.**@*****.*** linkedin.com/in/torrieyork

Cybersecurity Advisory Analyst Security Operations OT/IoT Security PROFESSIONAL SUMMARY

CompTIA Security+ certified cybersecurity professional with hands-on training in security operations, incident triage, network traffic analysis, vulnerability assessment, OSINT, and system hardening. Brings 3+ years of client-service, workflow management, documentation, root-cause analysis, and SLA-driven issue resolution experience. Differentiated by an Agriculture Business background, field operations experience, and portfolio work in OT/IoT security for cold chain, food supply, manufacturing, energy, and other critical infrastructure environments. Skilled at translating technical findings into clear client-ready documentation, risk summaries, and practical control recommendations.

CORE SKILLS

Cybersecurity Advisory & Operations: Incident Triage, Security Operations, Incident Response, Threat Intelligence, OSINT, Risk Assessment, Risk Mitigation, Security Controls, Root-Cause Analysis, Vulnerability Management, Remediation Tracking, Client Communication

Tools & Platforms: Splunk, Wireshark, Nessus, Microsoft Office, Excel, PowerPoint, Access, Windows, macOS, Linux OT/IoT & Critical Infrastructure: OT Security, IoT Security, Cold Chain Security, Food & Agriculture, Manufacturing, Energy, Facilities Operations, Network Segmentation Concepts, QA/Receiving Workflows Protocols & Framework Concepts: Modbus, CANbus, BLE, MQTT, BACnet, LoRaWAN, Zigbee/Z-Wave, PASTA Threat Modeling, NIST 800-171, CMMC Concepts, MITRE ATT&CK/Cyber Kill Chain Familiarity Business & Professional Skills: Process Documentation, SLA Adherence, Knowledge Management, End-User Training, Data Quality, Stakeholder Updates, Work-Order Coordination, Safety & Compliance Documentation CERTIFICATIONS

• CompTIA Security+ (Passed: March 2026 Expires: March 2029) PROFESSIONAL EXPERIENCE

Cybersecurity Trainee, SpringBoard Aug 2024 - Present

• Analyze network traffic and perform initial diagnostics using Wireshark and Splunk to support incident triage and response.

• Use OSINT and security research to categorize technical issues, assess potential impact, and improve threat-response accuracy.

• Evaluate and document system hardening techniques, security controls, and mitigation steps to reduce infrastructure vulnerabilities.

• Practice vulnerability assessment and validation workflows using Nessus, Windows, Linux, and network-defense concepts.

• Prepare written findings and technical summaries that translate security observations into clear remediation actions. Pension Processing Analyst, Aon Nov 2021 - Jun 2025

• Served as a primary support contact for 100+ monthly client requests while maintaining 80%+ fast response rate and SLA adherence.

• Investigated complex client data discrepancies using root-cause analysis, uncovering and resolving an approximately $15,000 variance.

• Translated complex benefits policies and data issues into clear end-user guidance, improving accuracy, trust, and service quality.

• Authored process documentation and knowledge resources that improved task delegation, consistency, and reduced rework.

• Trained and onboarded 5+ team members on corporate applications, knowledge management, and standard operating procedures.

• Collaborated across teams to resolve workflow issues and support sensitive client information in a regulated service environment. Landscaping Technician, Lone Star College Sep 2025 - Present

• Conduct inspections of campus grounds, assets, irrigation conditions, and environmental risks; document deficiencies and recurring operational needs.

• Coordinate with internal teams and contractors to support timely work-order resolution and maintenance activities across campus facilities.

• Apply field operations knowledge to identify safety, asset, and workflow issues relevant to OT, facilities, and critical infrastructure environments.

Long-Term Substitute, Major Elementary School Mar 2021 - Nov 2021

• Delivered structured training and instructions for diverse end users, ensuring complex information was clear, accurate, and actionable.

• Applied problem-solving strategies and adapted processes to improve participant outcomes and day-to-day operations. Community Assistant, Prairie View A&M University Aug 2019 - May 2020

• Monitored facilities for safety risks, supported incident intake and de-escalation, and provided front-line customer support.

• Authored detailed incident reports and logs to support administrative decisions and procedural compliance. SELECTED CYBERSECURITY & OT/IOT PROJECT EXPERIENCE Food as a Target: IoT Security Risk Framework for Cold Chain Infrastructure

• Built a professional threat-modeling portfolio project focused on IoT and OT risks across refrigerated trucks, warehouses, sensors, and distribution centers.

• Applied PASTA across objectives, technical scope, system decomposition, threat analysis, vulnerability analysis, attack analysis, and risk/impact analysis.

• Mapped the cold chain across farm/production, cold storage warehouse, refrigerated truck transit, and receiving/distribution center environments.

• Documented vulnerabilities across Modbus, CANbus, BLE, MQTT, BACnet, LoRaWAN, and Zigbee/Z-Wave protocols used in connected equipment.

• Developed attack scenarios for data integrity, availability disruption, and insider threat; tied consequences to recall, safety, legal, financial, and military-readiness impacts.

• Scored 10 risks and recommended technical, governance, and military-specific controls, including offline-first operations and QA receiving checks as a human detection layer.

LSC Landscape Operations Dashboard

• Built an interactive JavaScript/React web app with a hand-coded SVG campus map to digitize field schedules, active alerts, and recurring maintenance tasks.

• Designed a tablet-friendly operational interface covering 22 campus zones and 13 active alerts, demonstrating field workflow mapping and operations technology awareness.

• Organized zone data, schedules, alerts, and tasks in a maintainable structure that can run without a separate database or server. EDUCATION

• Cybersecurity Program, SpringBoard, Virtual

• Bachelor of Science in Agriculture Business, Prairie View A&M University, Prairie View, TX

Contact this candidate