Leo Lucca
West Palm Beach,FL
Summary
Experienced Cybersecurity Analyst specializing in network security, cyber defense, and incident response within government and energy sectors. Delivers security solutions in high-pressure environments, ensuring compliance and effectiveness. Manages complex incidents, analyzes vulnerabilities, and generates actionable intelligence to enhance operational security.
Overview
10
10
years of professional experience
1
1
Certification
Work History
SR. Security Analyst
NextEra Energy
Juno Beach, USA
04.2018 - Current
- Led security assessments of critical systems (email, web servers, database servers) to identify vulnerabilities and implement effective security measures.
- Collaborated with vulnerability management teams to assess attack vectors and identify system weaknesses, ensuring the development of appropriate mitigation strategies.
- Investigated security breaches, identifying root causes and developing updated security protocols to prevent future incidents.
- Conducted comprehensive risk assessments, providing actionable recommendations to strengthen security policies and practices.
- Developed and implemented best practices for security operations, providing recommendations based on emerging trends.
- Evaluated threat intelligence reports, analyzed malicious traffic, and documented threat actor activity to enhance threat intelligence efforts.
- Contributed to creating playbooks and standard operating procedures (SOPs) to improve threat detection and incident response capabilities.
Security Analyst / Incident Response
Harris Corporation
Melbourne, USA
12.2015 - 04.2018
- Engaged with 24/7 Cyber Incident Response Team (CIRT) to detect, analyze, and respond to security incidents, enhancing overall threat response capabilities.
- Monitored network traffic and investigated suspicious activity to safeguard a multibillion-dollar telecommunications infrastructure supporting US government operations.
- Utilized various technologies, including Intrusion Detection/Prevention Systems (IDS/IPS), Firewalls, SIEM, and Host-Based Security Systems (HBSS), to monitor and secure the environment.
- Partnered with engineering teams to identify vulnerabilities and develop remediation strategies, strengthening system security posture.
- Designed and implemented customized monitoring systems to address specific application and client needs, improving threat detection effectiveness.
- Maintained a strong knowledge base of cyber threats and underground activities, leveraging intelligence collection and analysis tools.
Education
B.S. - Information Management
Palm Beach State College
Lake Worth, FLSkills
- Incident Investigation
- Remediation
- Threat analysis
- IOC assessment
- TTP identification
- Vulnerability Management
- SIEM
- Splunk
- Q-Radar
- FireEye
- Palo Alto
- McAfee Endpoint
- Cylance
- Sophos
- Proofpoint
- Zscaler
- RSA
- Tanium
- Network Firewalls
- IDS/IPS
- Intrusion Detection
- Network Traffic Analysis
- Email protection
- AWS
Certification
- CompTIA Security+
- CCNA (Cisco Certified Network Associate)
- GIAC Certification
- CCSP (Certified Cloud Security Professional)
- AWS Certified Solutions Architect – Associate
Accomplishments
- Successfully led to the implementation of advanced security protocols, reducing the risk of security breaches within a large-scale operational environment.
- Worked directly with government clients and internal teams to improve incident response workflows and enhance the organization's security posture.
- Played a pivotal role in improving network security across multiple platforms by developing comprehensive incident response plans and threat analysis reports.
Skills
Splunk, Q-Radar, FireEye, Palo Alto, McAfee Endpoint, Cylance, Sophos, Proofpoint, Zscaler, RSA, Tanium, AWS, Proofpoint, EOP (Exchange Online Protection), SIEM, IDS/IPS, Vulnerability Management, Incident Investigation, Remediation, Network Firewalls, LAN, Intrusion Detection, Active Directory, Network Traffic Analysis, AWS, Zscaler, CCSP, VMware, Linux, Windows, Threat actor analysis, IOC analysis, TTP (Tactics, Techniques, Procedures) identification
Timeline
SR. Security Analyst
NextEra Energy
04.2018 - Current
Security Analyst / Incident Response
Harris Corporation
12.2015 - 04.2018
B.S. - Information Management
Palm Beach State College