John Porter

Cybersecurity specialist with comprehensive experience in IT support and cyber defense, adept at enhancing system security and efficiency. Proven track record in vulnerability management and cybersecurity process improvement at Richmond Federal Reserve Bank, coupled with robust technical support skills developed at Virginia Union University. Equipped with advanced proficiency in Python, Network Scanning Tools, and Linux, ready to contribute to and grow within a dynamic cybersecurity team.

Comp Tia Security + CE

• SIEM-(Security Information and Event Management)-Implemented and configured a SIEM solution (e.g., Splunk, ELK Stack, QRadar) in a lab environment. Integrated various log sources such as firewall logs, IDS/IPS alerts, and endpoint logs into the SIEM. Developed and customized correlation rules to detect security incidents and anomalies effectively. Generated and analyzed reports to identify trends, patterns, and potential security threats.
• Incident Response Simulation-Conducted simulated incident response exercises in a lab environment to practice detection and response procedures. Participated in tabletop exercises or red team vs. blue team scenarios to simulate real-world security incidents. Documented incident response processes, including initial detection, containment, eradication, and recovery steps. Collaborated with team members to assess incident severity, prioritize response actions, and minimize impact on business operations.
• Threat Hunting and Analysis- Engaged in threat hunting activities to proactively identify potential security threats and vulnerabilities. Leveraged threat intelligence feeds and open-source intelligence (OSINT) sources to enhance threat detection capabilities. Analyzed network traffic, logs, and other security data to identify indicators of compromise (IoCs) and suspicious activities. Developed hypotheses and conducted investigations to validate potential security incidents and determine their scope and impact.