Senior Cybersecurity & Microsoft Security Automation

GERMAN QUEZADA

Cybersecurity Analyst Senior Infrastructure Specialist Automation Engineer Montreal, QC 438-***-**** *************@*****.***

[LinkedIn] [GitHub] [Website] [YouTube]

PROFESSIONAL SUMMARY

Cybersecurity professional with 15 years of experience in hybrid environments, I possess deep expertise in managing Microsoft 365, Entra ID (Azure AD), and Windows Server (2016/2019). My background includes administering Intune, Purview, Exchange Online, and Active Directory, alongside configuring secure hybrid networking and VPNs. I am proficient in monitoring and investigating malicious activity—including suspicious users, links, and IP addresses—by leveraging security appliances such as Palo Alto and Fortinet. Furthermore, I bring 3 years of experience implementing Microsoft Copilot and leveraging LLMs (ChatGPT, Gemini, and local Ollama instances) to accelerate incident response and automate security operations. Having supported 135+ users across industrial and government sectors, I am highly proficient in ITSM, incident escalation management, and maintaining secure, high-availability enterprise infrastructure.

Built DAVA, an AI-powered endpoint administration platform integrating Python, PowerShell, SSH and local LLMs.

Supported 135+ enterprise users in a hybrid Microsoft environment.

Conducted Level 1–3 SOC investigations using Sentinel, Splunk and Defender.

Developed security documentation, SOPs and analyst onboarding material.

Automated administrative tasks using PowerShell and Python.

CORE COMPETENCIES

Incident Response • Threat Hunting • Endpoint Security • Microsoft Security • Identity & Access Management • Active Directory • Entra ID • Intune • Security Investigations • PowerShell • Python • KQL • Windows Administration

TECHNICAL SKILLS

Security: Sentinel, Defender XDR, Purview, Splunk, Proofpoint, Cisco Secure Endpoint

Identity: Entra ID, AD, Okta, RBAC, PIM, MFA, SSO

Infrastructure: Windows Server, Intune, SCCM, HyperV, VMware, Exchange Online

Scripting: Python, PowerShell, KQL, Git

PROFESSIONAL EXPERIENCE

SOC Analyst Aldev Solutions February 2023 – Present

Part of my part time job is to investigate and triage alerts at all levels, providing cybersecurity training to the IT department on triage workflows and tabletop exercises.

Administer Entra ID, Intune, Defender 365, Purview, Exchange Online, and Windows Server (2016/2019) to support 135+ enterprise users.

Manage identity lifecycle, PIM (Privileged Identity Management), MFA, SSO, Okta, and VPN administration.

Monitor endpoints, risky users, and vulnerabilities via Defender 365, utilizing KQL scripting in Sentinel for threat hunting and automation rules to reduce false positives.

Leverage security tools and appliances including Fortinet, Anyrun, Proofpoint, and Cisco Secure Endpoint.

Handle other IT infrastructure duties including network support, configuring switches, and hardware/software support.

Cybersecurity Associate Analyst Alliance Industrielle (Contract) July 2021 – January 2023

Managed, organized, and delegated Level 1 and Level 2 teams, establishing procedures, guidelines, and training materials.

Performed end-to-end SOC investigations for Level 1–3 incidents, handling true positives and high alerts.

Conducted threat hunting and log analysis using KQL, Splunk, and Sentinel, while monitoring server logs across Jira and Zscaler.

Produced forensic documentation and incident reports, alongside creating SOC documentation and onboarding guides.

Utilized tools such as Proofpoint, Threat Response, AnyRun, SecureWorks, Defender 365, Palo Alto (PAN-OS), Intune, and McAfee Orchestrator.

Cyber Security Analyst Ministère des Transports (Contract) February 2021 – June 2021

Supported deployment coordinators by managing and tracking security issues proactively before and during production deployment.

Achieved deployment planning based on stakeholder approvals and wrote structured procedures for development equipment.

Analyzed present and future Group Policy Objects (GPOs), evaluated cyber threats, weaknesses, and vulnerabilities for remote workers, and documented mitigation strategies.

Supported Level 1 and Level 2 teams, provided end-user education, and structured action plans for incident follow-ups.

IT Generalist Emerson March 2020 – December 2020

Assisted on the new acquisition concerning assets migration, user migration, and implemented physical LAN and WAN.

Administered user accounts and directory infrastructure via Azure portal, Active Directory, and Windows Server, including user/computer account creation.

Rack-mounted and installed physical equipment including MPFL routers, switches, and servers, while handling IP address subnetting and assignment.

Implemented Windows 10 environment, set up MFA for Office 365 users, and enrolled user phones into Meraki administration.

Built Excel-based asset management risk reports utilizing Pivot Tables for tracking asset IDs, purchase dates, warranty expiry dates, locations, departments, and statuses.

Windows 10 Migration Specialist General Dynamics August 2019 – March 2020

Deployed and migrated Windows 10 images, applications, and drivers via MDT and SCCM, providing Level 2 support and troubleshooting for legacy applications and in-place migrations.

Configured FortiClient firewall settings and additional security controls while supporting remote executives via Wiseconnect.

Created custom PowerShell tools to optimize Level 2 support and managed AD accounts along with Office 365 MFA enablement.

IT Support Level 2 / Security Associate Analyst Jubilant January 2017 – July 2019

Served a 500+ client base as a Level 2 and Network Admin specialist in a high-tech pharmaceutical manufacturing company, managing Windows Servers (2008, 2012), VMWare vSphere ESXi 6.5, and MDT deployments.

Provided VPN support, administration, and troubleshooting using Cisco AnyConnect, alongside Cisco ISE wireless administration and guest access.

Investigated local computer compromises, infections, and ransomware attacks, performing root cause analysis and maintaining network security standards.

Supported security operations for teams in India by monitoring and administering Barracuda web filtering, Cisco ISE, and investigating host breaches with local forensics.

Cybersecurity Associate Analyst UBITRAK July 2016 – December 2016

Performed web vulnerability testing using Netsparker and penetration testing utilizing Nmap, Metasploit, Nessus, and GFI Languard, generating client-facing vulnerability reports.

Managed virtualized environments and monitoring tools, including Watchguard firewall administration, pfSense support, and Veeam backup alerts.

Applied frameworks such as ITIL, OWASP, NIST, HIPAA, and PCI/DSS alongside endpoint security support via Cisco AnyConnect.

Team Lead – Systems Analyst Level 2 CIBC (Soroc) January 2016 – July 2016

Participated in SCCM pre-planning and planning phases, meeting with stakeholders to design site architectures, geographic locations, and component roles.

Troubleshot image deployment errors, provisioned SQL databases, and managed OSD portals and Active Directory OU structures.

Provided Level 2 systems analysis and WinDbg kernel debugging sessions for Windows XP, 7, and 10 workstations and Citrix environments.

Team Lead / Systems Analyst Level 2 Aldo (Tata Consulting Services) February 2014 – January 2016

Managed Windows 2008 R2 infrastructure, Active Directory, GPOs, and ADUC while collaborating with software developers and third-party vendors.

Handled SCCM Windows 7 to 10 migrations, OS image deployments, Symantec Endpoint protection policy administration, and print server management.

Provided cross-platform support including MAC applications/printers, ARD, RDP, Citrix, SQL developer troubleshooting, and WinDbg debugging.

Systems Analyst (Software) FGL Sports June 2012 – December 2013

Managed overnight patching schedules and troubleshooting using IBM Director, Ghost imaging tools, and DHCP management.

Installed and supported networked Pin Pads, POS registers, and Cisco switches to assist field deployment technicians.

IBM SSR / Systems Analyst IBM December 2011 – June 2012

Delivered Level 1 and end-user support, reimaging systems, configuring POS and Pin Pad hardware, and providing onsite technical support for RBC and TD Bank.

IT Coordinator / Support Intema Solutions June 2011 – November 2011

Supported end-user networks, hardware, and software, while managing web hosting environments across Linux, Mac, Windows XP, 7, and Windows Server 2003 with IIS.

Administered Active Directory permissions, analyzed Konversation email platform error logs, and supported mobile devices (Blackberry, iPhones).

Team Lead / Systems Analyst Microage February 2007 – June 2011

Led Level 1 and 2 technicians supporting TD Wealth and corporate groups, overseeing onsite, network, and voice/data departments.

Conducted regular team meetings and managed Active Directory administration and network support operations.

IT Support – Video Editing December 1999 – June 2006

Supported Windows XP and Windows NT environments, handling hardware/driver updates and troubleshooting video editing software (Adobe Premiere) alongside specialized editing cards (RT200, RT XP, Digisuite).

FLAGSHIP PROJECT – DAVA

Designed and developed an AI-driven endpoint administration platform in Python featuring voice control, remote Windows/Linux administration, PowerShell automation, SSH investigations, endpoint backup/restore and local LLM-assisted forensic analysis. Demonstrates software engineering, cybersecurity operations and AI integration suitable for enterprise environments.

CERTIFICATIONS & EDUCATION

CompTIA Security+, Network+, A+, PDI+

Fortinet Certified Associate in Cybersecurity (Completed)

GIAC Security Essentials (GSEC) (In Progress / Course Completed)

MITRE ATT&CK Foundations (Completed)

Python Ethical Hacking (In Progress)

Ethical Hacking Building Python Attack Defense Tools (In Progress)

Diploma – Network Installation & Management (Delta College)

Diploma – Computer Information Systems (Strayer College)

Computer Repair Diploma (ICS)

Contact this candidate