Summary
Overview
Work History
Education
Skills
Timeline
Generic

Khalil Lyons

Summary

Cyber Security Professional with 5+ years of experience in the IT industry, with a focus on information security. Proven ability to identify, assess, and mitigate security risks to an organization's information assets. Expertise in security monitoring and analysis, vulnerability scanning, and security audits. Strong understanding of industry standards and regulations, including PCI DSS, HIPAA, NIST, and SOC 2.

Overview

9
9
years of professional experience

Work History

Information Security Analyst

IBM
02.2022 - Current
  • Skilled at working independently and collaboratively in a team environment.
  • Encrypted data and erected firewalls to protect confidential information.
  • Engineered, maintained and repaired security systems and programmable logic controls.
  • Monitored computer virus reports to determine when to update virus protection systems.
  • Investigated and resolved incidents of unauthorized access to sensitive information.
  • Administered and monitored firewalls, intrusion detection systems and anti-virus software to detect risks.
  • Conducted security audits to identify vulnerabilities.
  • Worked with other teams to enforce security of applications and systems.

IT Compliance Analyst

Learning Voyage Inc
09.2021 - 02.2022
  • Developed and maintained compliance database, tracking all compliance activities and documents.
  • Maintained up-to-date knowledge of current and emerging compliance regulations.
  • Responded to employee inquiries regarding compliance regulations and procedures.
  • Reviewed, revised and updated compliance policies and procedures to confirm continual compliance with applicable laws.
  • Identified, investigated and documented compliance violations and recommended corrective measures.
  • Assisted with internal and external audits to confirm compliance with applicable laws and regulations.
  • Prepared and submitted regulatory filings in timely manner.

Cybersecurity Specialist

Carahsoft Technologies Corp
08.2018 - 08.2021
  • Designed company-wide policies to bring operations in line with Center for Internet Security (CIS) standards.
  • Developed and implemented a security awareness training program, resulting in a 50% decrease in security incidents caused by employee error.
  • Conducted regular vulnerability scans and penetration tests, identifying and remediating 75% of security weaknesses before they could be exploited.
  • Collaborated with cross-functional teams to ensure security requirements were met for a new product launch, resulting in a successful launch with no security incidents.
  • Collaborated with third-party payment card industry (PCI) compliance partners.
  • Conducted security audits to identify vulnerabilities.
  • Performed risk analyses to identify appropriate security countermeasures.
  • Encrypted data and erected firewalls to protect confidential information.
  • Authored security incident reports, highlighting breaches, vulnerabilities and remedial measures.
  • Recommend improvements in security systems and procedures.

Cybersecurity Intern

Consultants Network
05.2014 - 08.2018
  • Recommend improvements in security systems and procedures.
  • Performed risk analyses to identify appropriate security countermeasures.
  • Conducted security audits to identify vulnerabilities.
  • Reviewed violations of computer security procedures and developed mitigation plans.
  • Worked well in a team setting, providing support and guidance.
  • Proven ability to learn quickly and adapt to new situations.
  • Self-motivated, with a strong sense of personal responsibility.
  • Worked effectively in fast-paced environments.
  • Monitored computer virus reports to determine when to update virus protection systems.

Education

Master of Science - Information Technology

Virginia Tech
Blacksburg, VA
05.2024

Bachelor of Science - Management Information Systems

Virginia State University
Petersburg, VA
05.2018

Skills

  • Splunk SIEM
  • Vulnerability and Penetration Testing
  • Qualys Cloud Platform
  • Information Auditing
  • Risk Assessment and Management
  • Security Operations Center (SOC) Operations
  • Malware Analysis
  • Cloud Security
  • Compliance with Security Requirements
  • Incident Response
  • Firewall Configuration and Management
  • Identity and Access Management (IAM)

Timeline

Information Security Analyst

IBM
02.2022 - Current

IT Compliance Analyst

Learning Voyage Inc
09.2021 - 02.2022

Cybersecurity Specialist

Carahsoft Technologies Corp
08.2018 - 08.2021

Cybersecurity Intern

Consultants Network
05.2014 - 08.2018

Master of Science - Information Technology

Virginia Tech

Bachelor of Science - Management Information Systems

Virginia State University
Khalil Lyons