Zufan Abebe
Alexandria,VA
Summary
Junior Cybersecurity Consultant with expertise in network security. Skilled in vulnerability assessments and implementing robust security measures. Collaborative team player with a commitment to staying abreast of emerging threats. Eager to contribute to secure IT environments through incident response and security policy implementation.
Overview
4
4
years of professional experience
1
1
Certification
Work History
Jr. Cybersecurity Consultant
Medcrypt
07.2023 - Current
- Perform complex risk analyses, including risk assessments.
- Analyze security design and features in medical device system architectures to identify gaps, flaws, and potential attack surfaces.
- Review FDA submission documents related to device instructions for use, device architecture, and cybersecurity to identify gaps, flaws, and other shortcomings in process or description.
- Support workshops to resolve documentation and/or design gaps, working collaboratively with the client.
- Identify and troubleshoot design gaps in cybersecurity architecture for medical devices against best practices, FDA guidance, FDA requirements (per Amendment to the Food, Drug and Cosmetics Act (FD&C Act)), and international standards.
- Produce security assessments suitable for submission to clients.
DESKTOP ENGINEER
SAIC | DOT
07.2022 - 07.2023
- Helped with wireless equipment setup and accounts and permissions to grant network access
- Maintained user accounts and access rights to ensure proper network access
- Collaborated with vendors to resolve hardware and software issues with desktop computers
- Organized and filed documentation related to computer hardware warranties and user manuals
- Kept a functional log of all necessary system upgrades and the dates they were completed
SECURITY ENGINEER
BD Medical Device
12.2019 - 08.2022
- Assessed vulnerabilities on Microsoft, Dell, VMware, and Adobe products and reported findings to the engineering team
- Participated in threat modeling for the NEO infusion pump
- Assisted with organizing, managing, and updating product security deliverables
- Conducted penetration tests, vulnerability scans, and static code analysis on product family and produced draft deliverables
PHARMACY TECHNICIAN II
INOVA Health System
08.2019 - 07.2022
- Collaborated with co-workers to improve work habits related to computer system interaction and customer relations
- Became a subject matter expert in computer system interaction and customer relations
- Carried out requests in accordance with applicable laws, HIPAA regulations, and the policies and procedures of the company
- Utilized the EPIC and Omnicell software to access patient information and precisely locate their rooms, enabling efficient delivery of medication to over 80 patients per day
Education
Cybersecurity Bootcamp Certification - Cybersecurity
Year Up/Northern Virginia Community College
Alexandria, VA01.2022
Cyber Security Certificate - Cyber Security Bootcamp
Per Scholas
Silver Spring, MD12.2021
General Science & General Studies -
Northern Virginia Community College
Alexandria, VA05.2020
Skills
- Product Security Deliverables
- SIEM
- Security Analytics
- Compliance Management
- Security Auditing
- Vulnerability Assessment
- Threat Modeling
- Security Needs Assessment
- Access Control
- Security Needs Assessment
- ISO 27001 Compliance
- Access Control
- Risk Assessment
- NIST Frameworks
Certification
- Security +
- CySA+
Timeline
Jr. Cybersecurity Consultant
Medcrypt
07.2023 - Current
DESKTOP ENGINEER
SAIC | DOT
07.2022 - 07.2023
SECURITY ENGINEER
BD Medical Device
12.2019 - 08.2022
PHARMACY TECHNICIAN II
INOVA Health System
08.2019 - 07.2022
Cybersecurity Bootcamp Certification - Cybersecurity
Year Up/Northern Virginia Community College
Cyber Security Certificate - Cyber Security Bootcamp
Per Scholas
General Science & General Studies -
Northern Virginia Community College
Similar Profiles
Mayur NarangMayur Narang
Lead DevOps Engineer at MedCryptLead DevOps Engineer at MedCrypt
Denitra FlowersDenitra Flowers
Program Analyst at Office of the Secretary of the Army, DEPUTY ASA(ALT) DASMProgram Analyst at Office of the Secretary of the Army, DEPUTY ASA(ALT) DASM
Jabari NeddJabari Nedd
Linux System Administrator (contract) at Army National GuardLinux System Administrator (contract) at Army National Guard
Magdalena BeckerMagdalena Becker
EWM Implementation Lead at P.C. Richard & SonEWM Implementation Lead at P.C. Richard & Son
Alyson NashAlyson Nash
Director of Business Development at Price ModernDirector of Business Development at Price Modern