DAVID OSEI – DUAH
Fairfax,USA
Summary
Operations & Cybersecurity Analyst with an active DoD Secret clearance and 8+ years of experience supporting 24/7 enterprise operations centers. Proven background in real-time monitoring, incident triage, escalation, and cross-team coordination across Windows and Linux environments. Strong operational mindset with hands-on experience using monitoring tools, ticketing systems, and automation platforms to maintain network health, reduce service disruptions, and support mission-critical systems.
Overview
5
5
years of professional experience
1
1
Certification
Work History
SOC Analyst/Work Center Manager
TechBridge Consultancy Services
08.2021 - Current
- Actively participated in large-scale, high-impact cyber breaches, managing Incident Response workflows and activities to support effective response and remediation.
- Established baseline metrics for network traffic and data flow to detect irregularities and formulate hypotheses on threat intelligence.
- Identified adversary tactics, procedures, behavior patterns, and techniques to enhance threat detection and response capabilities.
- Created incident responses, follow-up actions, and comprehensive reports, defining reporting standards to improve Incident Response processes.
- Led Incident Response activities, providing guidance and mentorship to junior staff members to ensure efficient and effective threat mitigation.
- Investigated and identified root causes of security incidents, communicating findings effectively with technical staff and leadership.
- Employed critical thinking and analytical skills to investigate and respond to cybersecurity alerts efficiently.
- Analyzed network traffic using enterprise tools, including Full Packet Capture (PCAP), Firewall, Proxy logs, and Intrusion Detection System (IDS) logs.
- Collaborated closely with team members to analyze alerts and threats, fostering a collaborative and proactive security approach.
- Stayed abreast of the latest threats, including Advanced Persistent Threats (APT) and common Tactics, Techniques, and Procedures (TTPs), to maintain a comprehensive understanding of the threat landscape.
- Utilized Open Source Intelligence (OSINT) to gather relevant data and pivot to identify potential malicious activity within the network.
- Performed dynamic malware analysis, contributing to the identification and mitigation of evolving threats.
- Conducted in-depth analysis of network traffic and correlated diverse security logs to generate actionable recommendations for incident response.
- Applied the Cyber Kill Chain framework to understand and mitigate the entire attack life cycle, from initial reconnaissance to exfiltration.
- Collaborated with the human resource manager to initiate personnel and staffing actions, and managed budgets, performed timekeeping, travel coordination for staff, command security coordination, and audits on clinical procedures and supplies.
- Monitored and oversaw the administration of servers, addressing day-to-day problems, patches, user administration, hardware failures, log file monitoring, backups, software upgrades, configuration changes, and program documentation.
- Resolved general IT concerns related to operating systems, user IDs, networking, and hardware issues.
- Monitored enterprise network and system alerts in a 24/7 operational environment, identifying, triaging, and escalating incidents based on severity and operational impact.
- Determined business and mission impact of network and system events, coordinating with Tier 2 and Tier 3 teams to restore services quickly.
- Created and routed incident tickets through ServiceNow and JIRA, ensuring accurate documentation, prioritization, and resolution tracking.
- Maintained detailed records of incidents, actions taken, and communications to support operational reporting and post-incident review.
- Collaborated with engineering, security, and infrastructure teams to troubleshoot connectivity, performance, and service availability issues.
- Supported continuous improvement of monitoring and response procedures to reduce repeat incidents and service disruptions.
Hospital Corpsman (Security Operations Technician, Healthcare Systems)
United States Navy (Walter Reed)
Bethesda, MD
08.2021 - Current
- Rendered emergency medical treatment, administered immunization programs, and performed minor surgical procedures using medical instruments.
- Worked extensively with Electronic Health Record (EHR) systems, ensuring accurate data entry, integrity, and secure handling of sensitive information.
- Verified user identity and authorization prior to granting access to electronic medical records and systems.
- Enforced least-privilege principles when accessing clinical and administrative systems.
- Applied OPSEC and cybersecurity best practices while working with networked systems and digital information.
Education
Master of Science (M.S.) - Cyber Security & Information Assurance
Western Governors University
Skills
- Software: Microsoft Office 365, SharePoint, Google Docs
- Operating Systems: Linux, Mac, Windows Server 2022, Windows 11
- Networking: LAN, WAN, VPN, Wireless, Switches, Routers, Wi-Fi
- Enterprise Applications: PeopleSoft, CRM
- Programming: Java, HTML, CSS, C, Visual Basic
- Processes: Change Management, Imaging, OSI Model, Active Directory
Certification
- CompTIA Advanced Security Practitioner (CASP+) | Certification | (In Pursuit)
- Certified Information Security Systems Professional (CISSP) | Certification | (In Pursuit)
- CompTIA Security+ | Certification | Certified
- Google Data Analytics Professional | Certificate | Coursera | Trained
- CompTIA CYSA+ | Certification | Certified
- CompTIA PENTEST+ | Certification | Certified
Timeline
SOC Analyst/Work Center Manager
TechBridge Consultancy Services
08.2021 - Current
Hospital Corpsman (Security Operations Technician, Healthcare Systems)
United States Navy (Walter Reed)
08.2021 - Current
Master of Science (M.S.) - Cyber Security & Information Assurance
Western Governors University
Operations, Monitoring & Technical Skills
- EDR: CrowdStrike, MS Defender, Cybereason, Carbon Black
- Automation Tools: Splunk Phantom, Palo Alto Networks Cortex XSOAR
- SIEM: Splunk, Azure Sentinel, Qradar, Rapid7
- OSINT: MITRE ATT&CK, VirusTotal, AbuseIPD, URLScan, ANY-RUN Sandbox, Cyber Kill Chain
- Network: Cisco Firepower, Nmap, MXToolBox
- Phishing: Barracuda, KnowBe4, Ironscale
- Ticketing: JIRA, ServiceNow, Click-up
- Penetration Testing NIST Series 7
- Information Security Analyst / Compliance Analyst / IT Auditor / Comptia Security
- Penetration testing
- NIST standards
- Compliance management
- Network Monitoring
- DHCP
- Monitoring Platforms
- SolarWinds (exposure/working knowledge)
- Microsoft SCOM (exposure/working knowledge)
- Operating Systems
- Windows Server 2022 / Windows 11
- Linux (Ubuntu via WSL2)
- Networking Fundamentals
- TCP/IP, DNS, DHCP, routing concepts
- LAN/WAN, VPN, Wi-Fi
- Network log analysis
- Automation & Operations Tools
- Jenkins CI/CD & job automation
- Splunk Phantom / Cortex XSOAR
- Bash / PowerShell (working knowledge)