Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

ZACS Ebuni

Rockwall,TX

Summary

Certified Security+ and CySA+ IT security professional with over 6 years of security experience in cybersecurity operation , SOC Monitoring , incident response , and email security analyst within enterprise, and financial services. Have hands on experience working in a variety of tools such as CrowdStrike, Splunk, Tenable Nessus, Cisco Talos, Cisco IronPort, Microsoft Defender, Cofense and Trellix. Experience includes monitoring security alert investigating phishing emails, Malware , suspicious account and compromised .Also experience in troubleshooting security systems , reviewing security configuration , investigate mail flow issues , and working with technical teamto resolves security incident and system problem Cybersecurity operations and email security analyst with a strong background in SOC monitoring, incident triage, phishing analysis, and mail flow troubleshooting. Supports investigation, containment, and remediation by reviewing alerts, logs, headers, and indicators of compromise across security and messaging platforms. Security analyst specializing in alert investigation, phishing and malware analysis, and email threat response across enterprise and financial environments. Works with infrastructure, messaging, and vendor teams to resolve deliverability issues, document findings, and keep security operations moving. Hands-on security professional with strengths in Splunk analysis, endpoint monitoring, email security policy review, and IOC-based investigation. Uses tools such as CrowdStrike, Microsoft Defender, Cisco IronPort, Cofense, and Tenable Nessus to support escalation, remediation, and stable security operations.

Overview

1
1
Certification
12
12
years of professional experience

Work History

Data Security / Email Security Analyst

Army & Air Force Exchange Service (AAFES)
Dallas-Fort Worth, TX
10.2022 - Current
  • - Identify and investigate suspicious email activity through Cisco IronPort, Cofense and Microsoft Defender for Office 365.
  • Monitored AAFES security systems and reviewed alerts for suspicious activity.
  • - Determine the risk based upon message header data points such as sender reputation, URLs used in the message body and/or attachment(s), sender authentication and evaluate what type of response should be taken.
  • Troubleshot mail flow and deliverability issues, resolving SPAM incidents related to SPF/DKIM/DMARC failures.
  • - Collaborate with Messaging Teams, Infrastructure Teams and Vendors to address elevated issues and document their findings. Maintain up-to-date status reporting via Microsoft 365 Security Alerts and corresponding Identity Signals.
  • - Assist Soc Team with incident investigations by reviewing security alert, analyzing logs and indicators of compromise ,gathering evidence and supporting escalation and remediation
  • -Review Microsoft 365 security alert and related identity signals; maintain clear ticket updates and handoff for follow-up work
  • Collaborated with Cisco technical support and internal infrastructure teams to investigate and resolve critical system issues, ensuring operational continuity.
  • - Troubleshoot Cico IronPort email security appliances, include mail delivery issues , message tracking , quarantine and policy related problem
  • - configure and maintain email security policies in Cisco ironport ESA to protect the company from phishing , spam , malware , and other email threats

SOC Analyst (Part-Time, Evening & Weekend shifts)

NTT Data – Citi Bank Project | Financial Services
09.2022 - 09.2023
  • Triaged and monitored security alerts to evaluate risk levels and their potential impact on business operations in a large financial services environment.
  • - Utilized Splunk to analyze logs, correlate event activities to identify suspicious behavior patterns and indicators that may require escalation.
  • - Identified phishing and malware attacks targeting users; documented findings and recommended containment measures for further investigation.
  • - Used SolarWinds and Endace to support network and packet-level analysis, and provided details case notes for shift handoffs

Incident Response Analyst I

Oryx GTL
03.2015 - 04.2017
  • -Conducted Level One investigation of security alerts, malware activity, and anomalous system events in industrial enterprise environment, identifying potential threats.
  • - Gathered evidence by examining logs and Indicators of Compromise (IOC's); documented evidence gathered during the initial investigation phase of security alerts; Escalation of Complex Cases to Senior Incident Responders;
  • Coordinated containment, remediation follow-up, and recovery efforts according to established operational procedures.

Education

Master of Science - Cybersecurity, Information Security Track

Georgia Institute of Technology
Atlanta, GA
01-2027

BS - Cybersecurity Technology

University of Maryland Global University
05-2025

AS - Computer Science

Oklahoma City Community College
01-2022

Skills

  • SOC & Incident Response Alert monitoring and triage, incident investigation, log analysis, IOC analysis, escalation, threat hunting, documentation and handoffs
  • SIEM & Endpoint Security Splunk, CrowdStrike Falcon, Microsoft Defender, Trellix, SolarWinds, Endace
  • Email Security Cisco IronPort ESA/SMA, Cisco Secure Email, Cofense
  • Triage/Reporter/Vision, Microsoft Defender for Office 365, Proofpoint TAP; phishing and BEC analysis
  • Threat Intelligence Cisco Talos, VirusTotal, ANYRUN; malicious URL, attachment, domain, IP and email-header investigation
  • Vulnerability Management Tenable Nessus, vulnerability assessment, findings review, remediation coordination
  • Cloud, Identity & Operations Microsoft 365 Security, Microsoft Entra ID, Okta, Conditional Access, ServiceNow; SPF, DKIM and DMARC troubleshooting

Certification

-CompTIA Security +, CompTIA CySA+

Timeline

Data Security / Email Security Analyst

Army & Air Force Exchange Service (AAFES)
10.2022 - Current

SOC Analyst (Part-Time, Evening & Weekend shifts)

NTT Data – Citi Bank Project | Financial Services
09.2022 - 09.2023

Incident Response Analyst I

Oryx GTL
03.2015 - 04.2017

Master of Science - Cybersecurity, Information Security Track

Georgia Institute of Technology

BS - Cybersecurity Technology

University of Maryland Global University

AS - Computer Science

Oklahoma City Community College
ZACS Ebuni