SIYD SMITH
Atlanta,GA
Summary
Detail-oriented security operations professional with 9+ years in incident response, security alert investigation, and telemetry analysis. Proficient in Microsoft Sentinel, Splunk, Microsoft Defender XDR, and vulnerability management tools. Skilled in reviewing device timelines and user behavior to assess risks and enhance service-level performance. ISC2 CC, Microsoft SC-900, and AZ-900 certified; pursuing CompTIA Security+.
Overview
1
1
Certification
10
10
years of professional experience
Work History
Security Engineer
ESURANCE
09.2024 - Current
- Investigate 40–55 security incidents and alerts daily across endpoint, identity, VPN, email, cloud, and enterprise environments while maintaining approximately 96% SLA performance.
- Analyze Microsoft Entra ID authentication, MFA, Conditional Access, suspicious sign-ins, account-compromise indicators, and privileged-access issues; coordinate resolution or escalation with relevant teams.
- Use Microsoft Defender XDR and CrowdStrike Falcon to review device timelines, running processes, user activity, system events, and device health when investigating endpoint alerts.
- Documented investigation findings, troubleshooting evidence, assignments, escalations, and closure details in ServiceNow and Jira to ensure clear handoffs and maintain accurate case records.
- Improved endpoint investigation and containment workflows by approximately 20% through development of standardized troubleshooting steps and escalation criteria.
- Support vulnerability and patch-remediation efforts using Tenable/Nessus and Qualys, helping reduce overdue critical and high-risk findings by approximately 16%.
- Created technical runbooks, investigation checklists, and incident-resolution procedures to enhance consistency and effectiveness across analyst team.
Information Security Analyst II
HUMANA
06.2022 - 08.2024
- Triaged and documented 35–50 daily incidents and security alerts using ServiceNow, Microsoft Sentinel, Splunk, Defender XDR, CrowdStrike, and identity telemetry while maintaining 95%+ SLA attainment.
- Investigated authentication failures, MFA issues, unusual sign-ins, account security concerns, and remote-access issues; resolved or escalated issues with detailed documentation.
- Analyzed device events, processes, user activity, network connections, logs, and system behavior to identify likely causes of endpoint and application issues.
- Coordinated vulnerability and device-remediation requests using Tenable/Qualys, CVE/CVSS information, validation testing, and remediation tracking.
- Coordinated vulnerability and device remediation requests, utilizing Tenable/Qualys, CVE/CVSS information, validation testing, and tracking for timely resolution.
- Compiled incident notes, root-cause analyses, technical evidence, and support metrics for IT and business stakeholders to enhance decision-making.
Associate Security Engineer
MERKLE
01.2020 - 05.2022
- Managed 30–40 technical and security incidents daily, prioritizing investigations to achieve 94%+ response SLA.
- Supported identity investigations involving MFA, access permissions, authentication anomalies, inactive accounts, privileged access, and account-security concerns.
- Facilitated identity investigations for MFA, access permissions, authentication anomalies, inactive accounts, and privileged access.
- Handled approximately 30–40 technical and security incidents per day, prioritizing investigations and maintaining an estimated 94%+ response SLA.
- Coordinated vulnerability remediation efforts with ServiceNow/Jira, Tenable/Nessus, Qualys, and ensured follow-up with technical teams.
- Developed incident runbooks, knowledge articles, SOPs, and technical documentation to improve investigation consistency and handoffs.
IT Security Analyst
CARESOURCE
01.2018 - 12.2019
- Investigated 20–30 daily security incidents and alerts involving authentication, endpoints, malware, phishing, account access, applications, and user activity.
- Documented troubleshooting steps, user information, technical evidence, response actions, and escalation requirements in incident and service records to ensure comprehensive incident tracking.
- Improved critical and high-risk remediation completion from approximately 82% to 93% through ownership coordination, patch tracking, validation, and retesting.
- Partnered with infrastructure, application, security, and business teams to escalate complex incidents, validate fixes, and ensure proper closure.
- Collaborated with infrastructure, application, security, and business teams to escalate complex incidents, validate fixes, and ensure timely resolution and closure.
Junior Information Security Analyst
HEALTHMARKETS
01.2017 - 12.2017
- Triaged 15–25 daily technical and security tickets to address suspicious logins, account lockouts, malware, phishing, endpoint, authentication, and network issues, enhancing incident response.
- Reviewed user information, system events, account activity, and endpoint details to determine escalation paths and ensure timely issue resolution.
- Facilitated access provisioning and permission reviews for 100+ users, tracking vulnerability remediation and ensuring timely closure of identified issues.
Education
Bachelor of Business Administration (B.B.A.) - Computer Information Systems, Digital Innovation & Cybersecurity, Business Administration
Clayton State University
Skills
- Incident Investigation
- Security monitoring
- Endpoint detection
- Identity analysis
- Log & Event Analysis
- Root cause assessment
- Escalation and Handoffs
- SLA management Tools: Microsoft Sentinel
- CrowdStrike Falcon
- Microsoft Sentinel
- Splunk
- ServiceNow
- Jira
- Tenable/Nessus
- Qualys
- KQL
- SPL
- Microsoft Entra ID / Azure AD
Personal Information
- Title: SOC ANALYST | SECURITY OPERATIONS | INCIDENT TRIAGE
- Availability: Open to 100% Remote Opportunities
Certification
- ISC2 Certified in Cybersecurity (CC)
- Microsoft Security, Compliance, and Identity Fundamentals (SC-900)
- Microsoft Azure Fundamentals (AZ-900)
- CompTIA Security+ — In Progress
ADDITIONAL EXPERIENCE
Microsoft Instructor & Technology Consultant, Volunteer Abroad, Imo State, Nigeria, 2015, 2018, Delivered hands-on technology instruction and troubleshooting support; created step-by-step guides and explained technical concepts clearly to users with different skill levels.
Timeline
Security Engineer
ESURANCE
09.2024 - Current
Information Security Analyst II
HUMANA
06.2022 - 08.2024
Associate Security Engineer
MERKLE
01.2020 - 05.2022
IT Security Analyst
CARESOURCE
01.2018 - 12.2019
Junior Information Security Analyst
HEALTHMARKETS
01.2017 - 12.2017
Bachelor of Business Administration (B.B.A.) - Computer Information Systems, Digital Innovation & Cybersecurity, Business Administration
Clayton State University