Cybersecurity analyst specializing in SOC monitoring, threat hunting, and incident response across cloud, endpoint, and network environments. Reviews security alerts, maps activity to MITRE ATT&CK, and supports CSIRT actions that reduce risk, improve detection, and track remediation through vulnerability management tools and dashboards.
Overview
1
1
Certification
12
12
years of professional experience
Work History
Sr. Cybersecurity Analyst
Booz Allen
10.2023 - Current
- Monitored security alerts and events 24/7 across network devices, firewalls, IDS/IPS, and SIEM platforms to help spot and respond to incidents in real time.
- Reviewed network security events in Firepower, including traffic activity and IDS alerts, to help identify malicious behavior.
- Reviewed host activity through Microsoft Azure and M365 security tools, including Sentinel, Defender for Cloud, and Entra ID.
- Combined security data from multiple sources to identify threats and support CSIRT procedures for risk reduction and incident response.
- Reviewed threat intelligence and supported proactive threat hunting to identify emerging risks and update IRP content.
- Supported enterprise operating systems, including Windows and Linux, with working knowledge of Windows Active Directory during incident response.
- Tracked network communications and routing protocols, including TCP, UDP, ICMP, and BGP, along with common internet protocols and services such as SMTP, DNS, DHCP, SQL, and HTTP/HTTPS.
- Investigated malware infections, phishing attacks, and unauthorized access attempts while applying corrective and preventive security controls.
- Mapped observed behaviors and indicators to adversary tactics, techniques, and procedures using MITRE ATT&CK to improve detection and investigation accuracy.
- Completed proactive vulnerability assessments and remediation activities in alignment with CSIRT guidelines to reduce organizational risk.
- Performed vulnerability scans across cloud and on-premises environments using Nessus and OpenVAS.
- Managed vulnerability assessment schedules to support timely scanning, reporting, remediation tracking, and follow-up across enterprise assets.
- Built and maintained vulnerability management dashboards in Splunk and Jira to monitor risk posture and track remediation trends.
Investigated suspicious activity across networks, endpoints, and cloud environments.
Documented vulnerabilities in ticketing systems to ensure timely tracking and resolution of remediation requests.
Applied risk assessment frameworks to evaluate existing controls and identify security gaps in systems.
Coordinated with engineers to update firewall and access rules.
Prepared briefings on threats, findings, and Booz Allen client requirements.
Monitored network user activities to identify suspicious behavior and mitigate potential security threats.
Participated in risk assessment exercises designed to identify areas of vulnerability within the organization's IT infrastructure.
Analyzed network traffic logs, firewall logs, intrusion detection system alerts, and antivirus reports to identify potential threats.
Responded promptly to cyber incidents by analyzing attack signatures, isolating affected systems, and restoring normal operations.
Created detailed incident reports following a successful breach or other security event.
Maintained up-to-date knowledge of evolving cybersecurity trends and technologies.
Provided training on various topics related to cybersecurity awareness and best practices.
Designed, implemented, and maintained security systems and controls.
Senior Research Analyst
Xcelerate Solutions
Clarksburg, West Virginia
10.2019 - 06.2023
Facilitated handling of top secret information through SIEM operations, Sentinel use, Windows 10 desktops, Microsoft Office programs, and Active Directory tasks; submitted weekly reports ahead of deadline.
Executed troubleshooting of Windows desktop systems and FBI network protocols, providing 24/7 support for homeland security measures.
Managed KVM switches and information security tools to ensure secure and efficient operations.
Used Client Tracking and Communication System (CTCS) software to locate and access information across researched programs requiring strong technical skill.
Data Technician
Leon County Jail
Tallahassee, Florida
04.2015 - 04.2019
Reviewed data from CJIS, NCIC, and FCI systems to ensure accuracy and compliance.
Maintained secure handling of sensitive jail records and detainee information, ensuring confidentiality and integrity of records.
Monitored daily activity logs, control systems, sally ports, and security entrances within detention facility while maintaining secure handling of jail records and detainee information.
Prepared and routed booking reports and related information to appropriate destinations, facilitating timely access for authorized personnel.
Entered prisoner arrest information into computerized booking system.
Sr. Cybersecurity Analyst at Health Care Service Corporation, Blue Cross Blue Shield of MontanaSr. Cybersecurity Analyst at Health Care Service Corporation, Blue Cross Blue Shield of Montana
Sr. Information Systems Security (Cybersecurity) Analyst/Specialist at Evolver Federal/CSSSr. Information Systems Security (Cybersecurity) Analyst/Specialist at Evolver Federal/CSS