Security Analyst - Threat Detection & IR

Faith Bitsia

Security Analyst

+1-571-***-**** ************@*****.*** Winchester, VA LinkedIn GitHub

Summary

Results-driven Security Analyst with 7 years of experience in cybersecurity, threat detection, incident response, vulnerability management, and risk mitigation across enterprise environments. Skilled in monitoring security events, analyzing threats, implementing security controls, and strengthening organizational security posture to protect critical systems, networks, and sensitive data. Proven expertise in SIEM tools, cloud security, access management, compliance auditing, and security operations, with a strong focus on reducing vulnerabilities and improving incident response efficiency. Experienced in collaborating with cross-functional IT and security teams to ensure compliance with industry standards, including HIPAA, PCI DSS, and cybersecurity frameworks.

Skills

Cybersecurity & Risk Management Skills: Incident Management, Risk Management, Vulnerability Management, Threat Analysis, Threat Detection, Threat Intelligence, Risk Mitigation, Disaster Recovery, Incident Response, Social Engineering Awareness, Critical Thinking Skills, Problem Solving, Communication Skills, Attention to Detail

Cloud & Infrastructure Security Skills: AWS, Microsoft Azure, Cloud Security, Zero Trust Architecture, ICAM (Identity, Credential & Access Management), Identity and Access Management (IAM), Access Control and IAM, Linux, Firewall and Network Security, Mobile Security, Data Protection, Encryption Algorithms, Cryptography

Security Operations & Monitoring Tools: Elastic SIEM, SOAR, Tenable, Qualys Cloud Platform, Intrusion Detection, System Monitoring, Monitoring Alerts, Virus Monitoring, Vulnerability Assessment, Compliance Auditing, Security Compliance and Frameworks, Threat Monitoring, Documentation and Reporting

Automation & Scripting Skills: PowerShell, PowerShell Scripting, Automation Scripting

Experience

Evergreen Health and Rehabilitation, Winchester, VA Sep 2025 – Present

Security Analyst

Executed enterprise vulnerability management across Windows and Linux servers using Tenable, prioritizing high-risk findings and coordinating remediation with system owners, resulting in an 80% reduction in critical vulnerabilities within six months.

Conduct continuous vulnerability scanning, risk analysis, and remediation tracking, delivering actionable security reports to technical teams and leadership that support risk-based decision making and accelerate remediation timelines.

Developed PowerShell automation scripts to streamline vulnerability remediation, system hardening, and security log monitoring by analyzing system events for suspicious activity, contributing to a 40% reduction in system downtime.

Implemented custom detection and response rules in Microsoft Defender for Endpoint and monitored IDS alerts to identify potential threats, enabling faster incident containment and improving security operations response time.

Employed security configuration reviews and compliance audits aligned with DISA STIG standards, achieving 100% reduction in critical, 90% in high, and 76% in medium vulnerabilities across the server environment.

First Coast Company, Chantilly, United States Apr 2021 – Aug 2025

Security Analyst

Acknowledged potential cybersecurity threats while managing threat detection and incident response processes using SIEM tools such as Splunk and IBM QRadar, reducing incident response time by 35% and minimizing operational security impacts.

Accompanied regular vulnerability assessments using Nessus and Qualys to identify critical system weaknesses, collaborating with IT teams to implement remediation strategies that reduced high-risk vulnerabilities by 40% across enterprise systems and networks.

Supervised network security systems for potential threats and vulnerabilities while implementing and maintaining security controls, including firewalls, intrusion detection systems (IDS), and antivirus solutions, improving overall network security compliance by 30%.

Updated security documentation, including disaster recovery plans and incident response procedures, while proactively identifying security risks, vulnerabilities, and emerging threats, contributing to a 25% improvement in security preparedness and audit readiness.

Responded to security incidents swiftly by analyzing system and network activities, enhancing threat detection accuracy by 32%, and strengthening the organization’s overall cybersecurity posture.

Birmingham Green, Manassas, United States Apr 2018 – Mar 2021

Help Desk Technician

Maintained documentation of over 300+ support requests, incident resolutions, troubleshooting activities, and technical support cases within the ticketing system, improving issue tracking accuracy and reducing resolution delays by 25% across daily IT operations.

Monitored network performance across 100+ systems and endpoints, identified connectivity issues and system irregularities, and escalated critical incidents promptly, contributing to a 30% reduction in network downtime and improved operational continuity.

Conducted comprehensive risk assessments, identified critical security threats, and implemented effective risk mitigation strategies and security controls that strengthened the organization’s overall cybersecurity posture by reducing vulnerabilities by 35%.

Ensured compliance with industry regulations and security standards, including HIPAA and PCI DSS, by supporting audit readiness initiatives and maintaining documentation processes that resulted in 100% compliance across security and operational procedures.

Updated security documentation, including disaster recovery plans and compliance records, while proactively identifying security risks and emerging cyber threats, contributing to a 25% improvement in security preparedness and audit readiness.

Education

Master of Science Cybersecurity Technology Dec 2024

University of Maryland Global Campus, Hyattsville, MD

Bachelor of Science Psychology Jun 2014

University of Buea, Cameroon

Certification

CompTIA Security+ CE Certification, 04/01/25 Cybersecurity Technology Certification, 12/01/23 CISSP (In Progress)

Contact this candidate