Smith Tifuh
Cyber Security Specialist
Columbus
Summary
Certified cyber security specialist with experience in Vulnerability management, Incident Analysis and Response, Endpoint protection, Security monitoring and Cloud Security. Critical thinker and ability to exercise in depended on judgment, acute attention to accuracy and detail.
Overview
8
8
years of professional experience
Work History
Cyber Security Specialist
Foji Global Tech
09.2022 - Current
- Monitored use of data files and regulated access to protect secure information.
- Reviewing all incoming alerts, properly investigate and ticket all identified potential security threats within the agency's incident response-ticketing platform.
- Monitored confidential company data and mitigated hacking through network systems updates.
- Ensuring authorized access by investigating improper access, revoking access, reporting violations, and monitoring information requests.
- Assisting the team lead in generating weekly report, Documenting of alerts and all artifacts.
- Triaging Incidents, ticket updates and reporting of cyber events.
- Manage and maintain admin privilege access for our devices
- Used BeyondTrust to protects sensitive resources and data from unauthorized access
- Explain false positive and false negative and other technical terms to non technical personelles
- Managed the lifecycle of privileged accounts and decrease operational costs to increase cybersecurity and keep hackers out
- Developed and implemented incident response plan and playbooks to swiftly responded to detected threat.
- Managed VM lifecycle and deploy patches using Qualys
- Collaborated with the team to implement security measure and improve overall security posture.
- Create and add users to Active directory groups.
- Explained and guide the flow of VM lifecycle, Qualys agent deployment.
- Explained with details and example how Incident response, Endpoint protection, SIEM and VM works.
- A good collaborator and team member.
Security Engineer
Microsoft
01.2021 - 09.2022
- Defender ATP SME
- Execute, manage, and lead customers & partners thru the onboarding process by providing remote guidance and following best practices
- Utilize your demonstrated technical skills and leadership to assist with resolution of issues and removing any adoption blockers
- Assist customers and partners with configuration of onboarding tools and processes
- Exchange Server, Mail Flow, SCCM, EDR, Defender Anti-Virus, ASR rules
- Microsoft Cloud technologies: Microsoft Defender ATP, Office 365 ATP, Microsoft Endpoint Manager (Intune), Azure Active Directory, Microsoft Threat Protection
- Microsoft Defender Advanced Threat Protection, Office Advanced Threat Protection, Intune, SCCM and GPO
- Analyze, develop, and communicate key onboarding process and technology improvement feedback for the development/engineering teams to enhance the entire deployment cycle
- Develop, foster, and maintain effective working relationships with various groups within the organization including engineering, account teams, enterprise services\support, and partner teams to deliver key business metrics
- Microsoft data loss prevention and information protection
- Configure and manage shadow IT, conditional access policy
- Evaluate Microsoft security scores, exposure scores, vulnerability and apply recommended actions
- Threat forensic
- Manage server’s deployment
- MacOS management experience
Cyber Security Analyst
Ability Matter Ohio
06.2017 - 01.2021
- Investigate and mitigate multiple security incidents (DDOS, Brute force etc)
- Create and Manage Network discovery and application vulnerability scans
- Investigate and mitigate multiple security threats using AWS Guard duty
- Responsible for monthly asset quality control to ensure accurate asset classification and tagging
- Review AWS Inspector findings and provide recommendations for remediation
- Plan and Coordinate Qualys virtual appliance and cloud agent installations
- Review and tune windows Defender ATP malware and exclusion policies
- Make recommendations to senior management on results of analysis and work closely with other Information Technology groups to refine and enhance security controls
- Investigate multiple malware related incidents using Defender ATP
- Review, Analyze AWS WAF logs and provide recommendations to reduce false positives
- Review and implement IP and Geo blocks using AWS WAFs during attacks
- Configure and manage Defender ATP anti malware and exclusion policies
- Develop security incident response runbook for Malwares, Phishing, DDOS and several others
- Plan, prioritize and coordinate vulnerability remediation with other departments
- Integrate and Manage Codegrip cloud solution for Source code static security analysis
- Review source code security scanning and coordinate vulnerability remediation prior to code promotion to production systems
- Monitoring of Splunk dashboard and alerts investigation
- Developed coordinated, implemented and maintained standards and procedures to protect the security and integrity of information systems and data
- Observed and analyzed traffic to learn valuable lessons from known malicious actors and to determine countermeasures against such threats
- Provided detailed status updates on existing cyber security incidents daily to include follow up with client/customer to ensure satisfactory resolution.
IT Support Specialist
Ability Matter Ohio
02.2016 - 05.2017
- Provide corporate application and network monitoring
- Assisting in new colleague onboarding and environment setup
- Performing network and application troubleshooting to remote customers
- Joining computers to active directory domains
- Review Service Now Incident tickets closure notes for consistencies
- Performing basic network and system troubleshooting
- Preparing and Re-imaging of windows 7 and 10 operating system to new and existing computers
- Perform end user password reset and account unlock
- Create, manage and resolve work Incidents using ServiceNow Ticketing System
- Configure Active directory group policies
- Maintained detailed records of equipment repairs, upgrades, software installations, equipment assignment, and new purchases
- Performing routine servers and workstations patches and reboots
- Assisting in new colleague onboarding and environment setup
Education
CompTIA Sec+, AWS Solutions Architect -
Associate Degree - Accounting & Finance
University of Buea Cameroon
Skills
TECHNICAL SKILLSQualys Cloud, Tenable Nessus, Nmap, ZAPSIEM (Splunk), AWS CloudWatch, CloudTrailMicrosoft Defender for OfficeRedhat, CentOS, Kali
Defender for endpoints, Tanium,
Defender for cloud APPsDefender for Identity, BeyondTrust Privilege Management (EPM)
Linux, Windows Server 2012/16Service Now TicketingSAST and DASTVulnerability Lifecycle ManagementAWS Guard Duty, IAM, WAF, Inspector, Security HubAWS ALBs, S3, CloudFrontIncident ResponseRun Books CreationTCP/IP, DNS, HTTP, HTTPS, SSHAgile, Scrum, Change managementThreat HuntingDaily Security Incident StatusActive Directory, RBACHIPAA, PCI-DSSTimeline
Cyber Security Specialist
Foji Global Tech
09.2022 - Current
Security Engineer
Microsoft
01.2021 - 09.2022
Cyber Security Analyst
Ability Matter Ohio
06.2017 - 01.2021
IT Support Specialist
Ability Matter Ohio
02.2016 - 05.2017
CompTIA Sec+, AWS Solutions Architect -
Associate Degree - Accounting & Finance
University of Buea Cameroon