Clever Ugbodu
Henderson,NV
Summary
A cybersecurity expert with six years of extensive experience in conducting thorough vulnerability assessments across enterprise networks to support risk management and remediation efforts. Driven by results and possessing a wealth of experience, I am eager to take on a challenging role as a Vulnerability Management Analyst. I bring a proven track record in developing and implementing robust vulnerability management programs aimed at strengthening enterprise security and mitigating risks. My expertise includes conducting compliance, credentialed, and non-credentialed scans, as well as generating detailed reports using tools such as Qualys, Tenable.sc, Tenable.io, Rapid7 InsightVM, WIZ, and SNOW. I am known for my analytical thinking, innovative approach, and effective communication skills, thriving in both technical and non-technical environments.
Overview
7
7
years of professional experience
1
1
Certification
Work History
Vulnerability Management Analyst
PRO SAVVY (Client: PBGC)
06.2019 - Current
- Conducted ad hoc and remediation scans using Tenable Security Center.
- Configured option profiles and scheduled authentication scans in Qualys and Tenable.
- Performed credentialed and non-credentialed scans with Qualys and Tenable.
- Set up authentication vault credentials for scans.
- Created tags and asset groups in Qualys and Tenable.
- Generated ad hoc and scheduled reports using custom templates in Qualys and Tenable.
- Developed dashboards for operational and executive reports in Qualys and Tenable.
- Established policies for compliance and audit scans in Qualys and Tenable.
- Configured EC2 connectors in Qualys for real-time AWS data analysis.
- Conducted remediation scans with Tenable.
- Scheduled daily and weekly discovery and agent scans.
- Performed compliance scans using CIS and STIGS audit files in Tenable.
- Applied cybersecurity principles to meet organizational requirements.
- Recommended risk assessments to identify security issues from vulnerability data.
- Conducted compliance scans for cloud assets using OCI and Azure Security Center.
- Prioritized CVEs based on threat activity and reported incidents.
- Regularly assessed vulnerabilities with Tenable and Qualys tools.
- Analyzed scan results, prioritized remediation based on risk.
- Collaborated on remediation plans with cross-functional teams.
- Used ServiceNow to manage vulnerability remediation and documentation.
- Guided IT teams on secure configurations and best practices.
- Kept updated on emerging threats and best practices in vulnerability management.
- Conducted IT team training on vulnerability management and scanning tools.
- Identified and assessed system and application vulnerabilities.
- Used penetration testing tools like Metasploit, Nmap, and Nessus.
- Documented and escalated incidents for further action.
- Performed after-action reviews and outreach to asset owners for remediation.
- Modified audit files to align with organizational policies.
- Collected AWS and Azure vulnerability data for remediation.
- Built vulnerability reports in Power BI for stakeholders.
- Tracked open vulnerability tickets in ServiceNow to completion.
- Recommended remediation actions and collaborated with platform engineers.
Vulnerability and Risk Analyst
MINDSHIFT CORP (Client: Bank of New York)
05.2017 - 05.2019
- Reviewed vulnerability data from multiple sources, including penetration testing and vulnerability scanning, to assess risk to business assets.
- Used ServiceNow and Trello to track vulnerabilities from vendors, zero-day threats, third-party tools, internal pen tests, Nessus, and CrowdStrike.
- Developed and implemented a robust vulnerability management program aligned with enterprise objectives.
- Led a high-performing team, fostering collaboration and innovation.
- Collaborated with cross-functional teams to prioritize and remediate vulnerabilities.
- Integrated vulnerability management priorities into business processes.
- Drove improvements in vulnerability management through technology adoption and automation.
- Stayed updated on industry trends and emerging threats, adapting the program as needed.
- Evaluated and recommended vulnerability management tools for optimal effectiveness.
- Delivered regular metrics, reports, and presentations to executive leadership.
- Built a comprehensive vulnerability management program covering secure SDLC, patch governance, and application security.
- Created templates and performed active scans using Nessus.
- Validated assets post-patch using Nessus, CrowdStrike, and MAD.
- Conducted outreach campaigns and follow-ups with asset and business owners for remediation.
- Performed remediation on internal hosts and verified actions with other teams.
- Tracked and reported on newly announced zero-day vulnerabilities.
- Provided technical support and post-remediation analysis, identifying opportunities for improvement.
- Communicated risks and recommended security controls to business owners.
- Presented scan results in dashboards and reports, interfacing with third-party vendors to enhance the scanning process.
Education
Bachelor of Science - Cybersecurity Assurance
Western Governors University
Salt Lake City, UTSkills
- Vulnerability Management: Comprehensive program development, implementation, and optimization
- Leadership: Guiding and mentoring high-performing teams
- Collaboration: Working with cross-functional teams to prioritize and remediate vulnerabilities
- Continuous Improvement: Driving enhancements through technology, automation, and data-driven insights
- Industry Knowledge: Staying current on trends, threats, and best practices
- Tool Evaluation: Assessing and recommending optimal vulnerability management tools and technologies
- Reporting and Communication: Developing and delivering metrics, reports, KPIs, and presentations to key stakeholders
Certification
CompTIA Security + CE
CompTIA Project +
CompTIA N+
ITIl v4
SCRUM.ORG – Professional Scrum Master
Timeline
Vulnerability Management Analyst
PRO SAVVY (Client: PBGC)
06.2019 - Current
Vulnerability and Risk Analyst
MINDSHIFT CORP (Client: Bank of New York)
05.2017 - 05.2019
Bachelor of Science - Cybersecurity Assurance
Western Governors University
Similar Profiles
Jinyu YeJinyu Ye
Tim Hortons RUTR (Professional Training Project) at Savvy Pro EducationTim Hortons RUTR (Professional Training Project) at Savvy Pro Education
Jasmine HicksJasmine Hicks
Leasing Consultant at Pension Benefit Guaranty Corporation (PBGC) Via- Hana Engineers & ConsultantLeasing Consultant at Pension Benefit Guaranty Corporation (PBGC) Via- Hana Engineers & Consultant
Nidhi VijNidhi Vij
IT Infrastructure Project Management Manager at Science Applications International Corporation (SAIC) under contract to Pension Benefit Guaranty Corporation (PBGC)IT Infrastructure Project Management Manager at Science Applications International Corporation (SAIC) under contract to Pension Benefit Guaranty Corporation (PBGC)
Brandon MichelBrandon Michel
Group Fitness Instructor at Redemption Fitness HendersonGroup Fitness Instructor at Redemption Fitness Henderson
Zinnia TaylorZinnia Taylor
Software Development Intern at TechHive SolutionsSoftware Development Intern at TechHive Solutions