Paul Kiawu
Gaithersburg,MD
Summary
Dedicated and certified cybersecurity analyst with [number] years of experience in identifying, analyzing, and mitigating security threats. Proven expertise in threat detection, incident response, and security risk management. Skilled in network security, vulnerability assessment, and regulatory compliance. Strong analytical abilities coupled with effective communication and collaboration skills to safeguard sensitive information and assets. Passionate about staying abreast of the latest cyber threats and technologies to provide proactive protection for organizations."
Overview
6
6
years of professional experience
Work History
Cybersecurity Analyst
Capital One
06.2018 - Current
- Reduced risk of cyber attacks by conducting regular vulnerability assessments and penetration testing.
- Increased overall system resilience by identifying and mitigating single points of failure within the organization''s infrastructure.
- Maintained an up-to-date understanding of current threat landscape, tailoring defensive strategies accordingly for maximum effectiveness against evolving tactics employed by adversaries.
- Analyzed security incidents post-resolution, identifying areas for improvement in both technical controls and incident response processes.
- Conducted security audits to identify vulnerabilities.
- Developed and maintained incident response protocols to mitigate damage and liability during security breaches.
- Investigated and resolved incidents of unauthorized access to sensitive information.
- Implemented security measures to reduce threats and damage related to cyber attacks.
- Monitored use of data files and regulated access to protect secure information.
- Executed penetration testing to identify security weaknesses and develop disaster recovery plans.
- Encrypted data and erected firewalls to protect confidential information.
Cybersecurity Analyst
Bank Of America
05.2018 - 03.2022
- Enhanced network security by implementing advanced threat detection and prevention systems.
- Reduced risk of cyber attacks by conducting regular vulnerability assessments and penetration testing.
- Improved incident response times by developing and maintaining cybersecurity playbooks for common attack scenarios.
- Ensured compliance with industry regulations by performing comprehensive audits on existing security policies and procedures.
- Monitor and analyze security events using SIEM tools to detect and respond to potential threats in real-time.
- Conduct regular vulnerability assessments and penetration tests to identify weaknesses in systems and networks, and recommend remediation measures.
- Collaborate with cross-functional teams to develop and implement security policies, procedures, and controls to protect sensitive information and assets.
- Investigate security incidents, perform forensic analysis, and coordinate with relevant teams for incident response and resolution.
- Provide security awareness training to employees to promote a culture of cybersecurity and reduce the risk of social engineering attacks.
- Stay updated on the latest cybersecurity trends, technologies, and threats, and make recommendations for security enhancements based on industry best practices.
Education
Bachelor of Arts - History And Politics
Fourah Bay College
Freetown Sierra Leone 11.2012
Skills
Threat Detection and Analysis: Ability to identify and analyze potential security threats and vulnerabilities in systems and networks
Incident Response and Management: Proficiency in responding to and managing security incidents promptly and effectively to minimize damage and prevent future occurrences
Security Risk Assessment: Capability to assess and evaluate security risks and prioritize them based on potential impact and likelihood
Network Security: Knowledge of network protocols, encryption techniques, firewalls, and other security technologies to protect networks from unauthorized access and attacks
Vulnerability Assessment and Management: Skills in conducting vulnerability assessments and managing vulnerabilities by implementing patches, updates, and other security measures
Security Information and Event Management (SIEM): Experience with SIEM tools to monitor and analyze security events and logs for suspicious activities and threats
Penetration Testing: Ability to perform ethical hacking activities to identify weaknesses and vulnerabilities in systems and networks before malicious attackers exploit them
Regulatory Compliance: Understanding of industry regulations and standards such as GDPR, HIPAA, PCI DSS, and the ability to ensure compliance through security measures and practices
Analytical and Problem-Solving Skills: Strong analytical skills to analyze complex security issues, troubleshoot problems, and develop effective solutions
Communication and Collaboration: Excellent communication skills to effectively communicate security risks and recommendations to stakeholders, and collaborate with cross-functional teams for incident response and risk mitigation
Security Awareness Training: Ability to provide security awareness training to employees to promote a culture of cybersecurity within the organization and reduce the risk of human error
Timeline
Cybersecurity Analyst
Capital One
06.2018 - Current
Cybersecurity Analyst
Bank Of America
05.2018 - 03.2022
Bachelor of Arts - History And Politics
Fourah Bay College