Malka Moreno CCNA
917-***-**** **************@*****.***
SUMMARY AND QUALIFICATIONS
Intrusion Detection Analyst with experience investigating potential threats in internet facing servers (UNIX, Windows). Verified threats as malicious or false/positive. Conducted research on new vulnerabilities; ensured systems were updated with latest patches. Major network threats investigated:
• Network attacks against vulnerable services
• Host based attacks, unauthorized logins access to sensitive files and malware
• Data attacks on applications
PROFESSIOINAL EXPERIENCE
BLOOMBERG, New York, NY 2000 – July 2009
IDS Analyst, Information Security
• Conduct network security: monitor, verify intrusion and initiate validation process.
• Analyze real-time network data to assess the security posture of computer networks by utilizing ISS SiteProtector.
• Defend sites deployed on the DMZ against electronic attack which indicates an intruder is attempting unauthorized activity. Collaborate with system administrators on suspicious activity to deal with threats.
• Instruct Vulnerability Assessment and Penetration Team to scan and test network infrastructure on a weekly and monthly basis.
o Review results of scheduled network security scans and developed recommendations of vulnerabilities.
o Create signatures which define traffic patterns that were assessed by the PenTest.
o Ensure constant monitoring of security, using SNMP and Radius authentication
• Work with IDS team on reducing risk, identifying threats and internal compliance issues from a centralized security management console.
• Work closely with the IDS team to fine tune SiteProtector console to reduce false positives especially when there is a new XPU update.
• Develop, administer and perform incident problem handling procedures.
• Installed and configured Linux Rehl v5
ROUTER INTERNETWORK, INC., Jersey City, NJ 1996-2000
Network Engineer
• Designed, Implemented, supported and performed troubleshooting on LANS and WANS.
• Configured 2501, 2504, 2520 series Router for CISCO I.O.S. upgrades to 11.3/18.
• Installed and configured 3COMM Netbuilders Bridges and Routers.
• Configured PC’s for TCP/IP (Token-Ring and Ethernet). IP addressing, subnetting, and gateways.
• Pre-configured protocols RIP, IGRP, EIGRP, for the networks.
EDUCATION
Metropolitan Institute of Network Technology- Configuration of Routing Systems
TECHNICAL SKILLS
RealSecure, SiteProtector, IDP Juniper Networks, Arbor Peakflow
Tcpdump, Wireshark, Snoop, iplookup, ARIN, Samspade, Exceed