Daniel Joa Email & Phone Number

Canada

Canada

• Delivering exceptional managed services for various security technologies, including SIEM, EDR/XDR, IDS/IPS, firewall, threat intelligence platform, Anti-Virus, DLP, and SASE, among others.• Leading incident response investigations through all phases: detection, response, mitigation, reporting, recovery, remediation, and lessons learned.• Supporting customers on a diverse selection of security initiatives/programs such as, vulnerability management, threat modelling, asset security, security data collection, continuous monitoring, governance risk and compliance (GRC), threat intelligence, and security assessments.• Acting as a designated leader on more than 10 customer on-boarding projects to ensure proper scoping, tailoring, and a consistent transition to security operation services.• Contributing with the detection engineering practice in designing, testing, implementing, and maintaining detections for a large-scale of use cases library, including the creation of 22 firewall-based alerts and 8 MS Windows-based alerts (MITRE ATT&CK enterprise) • Conducting strategic, operational, and tactical threat hunting levering available monitoring technology and threat intelligence to detect malicious/suspicious activities and provide recommendations accordingly.• Documenting and maintaining customer build documents, security standards, guidelines, and operating procedures.• Collaborating with different teams to achieve audit compliance for various standards including NIST CSF, PCI DSS, ISO 27001 and SOC2.• Interpreting security data to produce and present valuable executive reports that enable stakeholders to make effective, informed decision.• Providing mentorship and guidance to team members on cybersecurity fundamentals, security operations, incident response procedures and career development, fostering professional growth and enhancing overall team effectiveness.

Burlington, Ontario, Canada

• Managed firewalls, routers, switches, wireless access points (WAPs), network access controls (NACs), and web application firewalls (WAFs). • Troubleshooted an extensive variety of network communication issues, including routing, latency, jitter, packet loss, traffic flow disruptions, VPN disruptions, SSL/TLS certificate errors, and DNS problems, among others. • Conducted best practice assessments to evaluate the security posture of a given network, ensure alignment with baselines or standards, and identify potential enhancements to increase protection and control.• Supported redesign projects for environments with varying levels of complexity and requirements. The most outstanding project involved migrating 19 MPLS-interconnected networks to a SD-WAN architecture. • Issued recommendations and implemented secure network constructs, such as identity and access management (IAM) solutions, deep packet inspection (DPI), encryption/decryption, rule/object optimization, and secure segmentation.• Monitored operational and security aspects of network-based devices, including memory consumption, bandwidth utilization, packet loss rating, latency, link fail-over, high availability (HA) status, VPN status, application/web utilization, IPS/IDS events, anti-virus events, and DLP events.

Burlington, Ontario, Canada

• Performed continuous monitoring and incident investigations for security managed services, levering different security technologies, including SIEM, EDR/XDR, IDS/IPS, Anti-Virus, Sandbox, and email gateway.• Monitored the operational status of a SIEM and troubleshooted problems as necessary, including not responsive log sources/collectors, unprocessed logs, parsing, and indexing errors.• Delivered managed detection and response (MDR) service, which covered the execution of preventive mitigation, such as host isolation, malware scan, IoC block, and object destruction, in an effective and timely manner, measured by SLAs.• Generated and analyzed vulnerability scanner reports.• Tested and fine-tunned SIEM alerts, considering complex attributes such as sensitivity and specificity. Tested a library comprising 26 alerts using log injection technique.

Markham, Ontario, Canada

• Provided general help-desk support in a security pen-testing lab. The most outstanding tasks included patch and backup management, building a Windows-based server destined for hacking simulation purposes (comprised the installation and configuration of several hacking tools and the migration of 31 VMs), and building a CentOS-based HA gateway (which involved the setup of a SSH-based VPN, and the configuration of IPTables).• Developed scripts to automate some of the daily tasks performed by the team. The most relevant script facilitated the restoration of a firewall ruleset to its original baseline and kept a log of latest changes.

Venezuela

• Managing an IT infrastructure in a small-scale environment. The scope of the role included overseeing daily operations, such as server management, network administration, systems performance monitoring, security administration, user support, and hardware/software maintenance.

Postgraduate, Cyber Security And Computer Forensics, Gpa: 3.6 / 4.0 (Dean’S Honour Recipient)

Activities and Societies: • Security Policies & Compliance • Legal and Ethical Issues in IT Security • Linux, Firewalls and VPN's • Mobile.

Bachelor'S Degree, Systems Engineering

• Computer Architecture & System Design. • Software Engineering. • Networking & Data Processing. • C++ & SQL. • Artificial Intelligence &.