Zarni Htay
East Amherst
Summary
Information security professional with extensive expertise in endpoint security, threat intelligence, and incident response. Proven track record of enhancing organizational resilience through the development of effective security policies and comprehensive training programs. Demonstrated ability to detect and mitigate security threats, ensuring robust protection of critical assets.
Overview
16
16
years of professional experience
1
1
Certification
Work History
Senior Security Engineer
Alternative Information Systems
Buffalo
01.2025 - Current
- Configure, deploy, and manage Microsoft Defender XDR solutions and Sentinel SIEM and XSOAR.
- Monitor and analyze security alerts, identifying potential threats and vulnerabilities.
- Develop and fine-tune detection rules, policies, and profiles to enhance threat detection capabilities.
- Investigate security incidents, collaborating with incident response teams to analyze and mitigate threats.
- Develop incident response playbooks and guidelines for rapid and effective incident handling.
- Continuously evaluate and optimize Microsoft Defender configurations, rules, and policies to minimize false positives and enhance threat detection accuracy.
- Identified and implemented automation and process improvements in security operations to streamline workflows.
- Integrated XDR and developed XSOAR playbooks, enhancing incident response efficiency and effectiveness.
- Maintained up-to-date knowledge of Microsoft Defender feature updates, patches, and best practices to enhance security posture.
Cyber Security Engineer
Centene, Corp.
Buffalo
11.2020 - 12.2024
- Achieved Subject Matter Expert (SME) in CrowdStrike and Trend, I implemented and managed endpoint security solutions aimed at safeguarding organizations with 20 subsidiaries including Federal healthcare system assets from cyber threats.
- Led incident response efforts during security incidents or breaches, conducting thorough investigations to contain and remediate impacts swiftly.
- Conducted regular threat assessments and vulnerability scans, identifying and addressing security risks to enhance organizational resilience.
- Additionally, I developed and enforced security policies and procedures to ensure compliance with industry regulations and standards.
- Collaborated with cross-functional teams to integrate security solutions into broader IT infrastructure, enhancing overall security posture.
- Furthermore, I played a pivotal role in enhancing security awareness across the organization by providing comprehensive training and guidance to employees, thereby fostering a culture of heightened security consciousness.
IS Analyst II
Delaware North
Buffalo
07.2017 - 11.2020
- Conducted risk assessments and vulnerability scans to identify security weaknesses and recommend remediation measures, to align with PCI compliance.
- Collaborated with cross-functional teams to deploy and configure security technologies such as SIEM, IDS/IPS, and endpoint security solutions.
- Developed and implemented security policies and procedures, strengthening organization's overall security posture.
- Documented and reported security incidents and findings to management and stakeholders, ensuring timely awareness and response.
IT System Administrator
LP Ciminelli
Buffalo
07.2016 - 05.2017
- Provided comprehensive support and implementation services for Exchange 2013/365, EMC SAN Storage, and Windows server administration, overseeing a network of 500+ nodes and domain users.
- Managed VMware ESXi initiatives, ensuring seamless virtualization operations and system availability.
- Managed LAN services and local security policies, facilitating system upgrades and migrations to improve overall network infrastructure.
- Spearheaded domain policy administration via Group Policy Objects (GPOs), overseeing domain and computer security measures, global application rollouts, access restrictions, and OS/application updates in alignment with Microsoft domain architecture.
- Demonstrated autonomy in executing systems integration tasks, encompassing daily support, troubleshooting, monitoring, and maintenance of mission-critical servers.
- Led systems integration efforts, driving support, problem resolution, monitoring, and maintenance of mission-critical servers.
- Applied expertise in ITIL Service Desk framework to deliver third-level support for remote sites, managing a spectrum of backoffice applications including SQL, Project Management Software, SAP ERP systems, and VPN configurations.
- Maintained Veeam backup solution and administered 3rd-party back-office applications critical for business interfaces.
- Supported deployment of data and voice communications infrastructure, including LAN drops, data schematics, VoIP system installation, wiring, and testing.
- Provided training and technical assistance to users, enhancing user proficiency and network functionality.
Network Administrator
Reid Petroleum Corp
Lockport
01.2015 - 05.2016
- Implemented new technologies to improve network efficiency.
- Troubleshot and maintained Cisco and Watch Guard firewalls and network appliances.
- Monitored and supported network equipment to minimize downtime.
- Maintain, repair, and update servers.
- Install, update and configure company computers.
- Have implemented Nimble SAN system with 23 Virtual Windows server, Barracuda Cloud backup service for onsite and offsite backup.
- Ensure PCI compliance within company's security policies and settings.
- Continually work to improve and streamline data connectivity.
- Trained staff on effective computer usage techniques.
- Maintained phone system by programming and installing features based on company requirements.
- Develop and assist with programming and integration.
System and Database Administrator
Global Engine Maintenance Aerospace
Doral
05.2012 - 09.2014
- Strengthened system security through setup and maintenance of System Center Manager, ensuring compliance and protection against vulnerabilities.
- Optimized system availability (averaging 99.99% uptime) and equipped the company with scalable systems to support fast business growth.
- Researched, recommended, and implemented network enhancements that significantly increased system reliability and performance.
- Evaluated and reconfigured Windows/Oracle setup to enhance performance and user experience.
- Implemented Barracuda cloud backup and moved email to MS 365 cloud.
- Delivered a cohesive solution managing Barracuda firewalls, web filtering and Cisco switches.
- Trained employees across multiple departments on network operations including log-in procedures, network management software, permissions, printing issues, security and use of software.
IT Technician
EBS copiers and Technology
Doral
11.2010 - 05.2012
- Configured firewalls, routers, switches, and other networking equipment for secure operation.
- Monitored network performance, implementing enhancements that contributed to stability and security.
- Conducted research and implemented network enhancements to improve system reliability and performance, resulting in optimized operations.
- Trained employees across departments on network operations, enhancing their ability to manage login procedures, network management software, permissions, troubleshooting printing issues, security protocols, and software usage.
- Assessed emerging technologies for potential integration into organization's and client's IT infrastructures, supporting strategic IT initiatives.
Education
Bachelor's degree - Information Systems Security
ITT Technical Institute
Miami, FL03-2012
Bachelor of Science - Physics
Yangon Eastern University
Myanmar05-2001
Skills
- Incident Response
- Threat analysis
- Vulnerability management
- Risk assessment
- Threat intelligence
- Zero Trust implementation
- XDR architecture
- CrowdStrike SME
- Endpoint Security Policy
- Infrastructure Security Optimization
- Security Operations Management
- XSOAR implementation
- Identity and Access management
Certification
- OSCP
- Qualys Vulnerability Management
- CrowdStrike Admin
References
References available upon request
Memberships And Activities
- Member of MBF (Myanmar Badminton Federation) and IBF (International Badminton Federation)
- Ranked world top 50 badminton player for two years
- Member of Buffalo Myanmar Community Organization
- Head coach at Rally Niagara Badminton Club
Timeline
Senior Security Engineer
Alternative Information Systems
01.2025 - Current
Cyber Security Engineer
Centene, Corp.
11.2020 - 12.2024
IS Analyst II
Delaware North
07.2017 - 11.2020
IT System Administrator
LP Ciminelli
07.2016 - 05.2017
Network Administrator
Reid Petroleum Corp
01.2015 - 05.2016
System and Database Administrator
Global Engine Maintenance Aerospace
05.2012 - 09.2014
IT Technician
EBS copiers and Technology
11.2010 - 05.2012
Bachelor's degree - Information Systems Security
ITT Technical Institute
Bachelor of Science - Physics
Yangon Eastern University