Eddie Yu Email & Phone Number

Jersey City, NJ, US

New York, NY, US

• Engage in all phases of Red Team activities, including development, planning, execution, and reporting.
• Assist in scoping and administering third-party penetration tests, such as internal network and web application assessments.
• Track and remediate vulnerabilities identified through internal Red Team activities and third-party penetration tests, collaborating with stakeholders and escalating as needed.
• Configure and manage automated breach and attack simulation (BAS) platform, AttackIQ, alongside other offensive security tools.
• Assist with the development of the Red Team Operating Standard and Procedure documents, authorizing the use of tools and techniques that align with adversary Tactics, Techniques, and Procedures (TTPs) while balancing.
• Perform internal threat hunting from a malicious insider perspective using an adversarial mindset.

New York, NY, US

• Participated in the development of a new security stack in preparation for a large company divestiture.
• Assisted the Security Operations Center (SOC) with reviewing alerts in the dashboard for Microsoft Defender for Endpoint (MDE)
• Performed contract renewals for third-party products and services within the Cyber department.

New York, NY, US

• Primary administrator of the company's privilege management solution, CyberArk Endpoint Privilege Manager (EPM); removing local administrator from over 400 workstations while minimizing impact to productivity
• Utilize Splunk to review Active Directory account activity to ensure that stale accounts are disabled and/or removed to reduce the risk or misuse or abuse by threat actors
• Identify paths to AD Domain Admins via privilege creep and reporting it to the CISO and head of infrastructure for remediation
• Examine Group Policies for issues classifying them into categories such as unused, conflicting, and redundant and well as issues related to precedence and inheritance; work with server engineer to refine GPOs according.
• Review requests to unblock websites for business-related tasks and approving or denying based on security risks to the organization and suggesting alternatives where applicable
• Research and review the company’s current and prospective security solutions to improve corporate security posture

New York, NY, US

• Packaged, tested. and deployed applications/application updates, and operating system patches in System Center Configuration Manager (SCCM) and InTune for over 5,500 workstations
• Participated in a “vulnerability strike team” to rapidly address vulnerabilities identified via vulnerability management platforms such as Rapid7 InsightVM, Crowdstrike’s Falcon Spotlight, and Tenable Nessus
• Created and executed over 150 change controls for deployment of applications/application updates, operating system patches, and configuration changes impacting a sizeable end user base
• Identified and coordinated the decommissioning of over 200 inactive virtual machines allowing the organization to reclaim at least 800GBs of RAM and 8TBs of storage
• Worked closely with various business unit leaders regarding application package creation, configuration, and delivery expectations
• Developed and maintained successful remote support strategy for field service team allowing for faster problem resolution for end users

New York, NY, US

• Provided white-glove technical support for the corporate headquarters where 6 of the 11 leadership positions reside including the CEO in addition to 120 non-executive end users
• Mentored colleagues on the remote management capabilities of MS Windows operating system empowering them to work harder and more efficiently
• Participated in large scale projects with other departments such as networking, telephony, and engineering including racking, stacking, and connecting of various equipment; frequently providing a competent set of “eyes.
• Contributed heavily to the successful buildout and opening of two office locations in Midtown, NY and Lakewood, NJ
• Facilitated the careful migration of users from Microsoft Windows 7 to Windows 10 and Office 2013 to Office 2016
• Sole administrator of a three-tiered asset management application for the investment accounting team consisting of an application server, databases, and an end user interface

• Provided dedicated technical support as part of a two-man team for over 150 end users
• Facilitated the careful migration of all users from Microsoft Windows XP to Windows 7 while maintaining a high level of trust with end users
• Managed the provisioning and deprovisioning of end user equipment and access to systems during employee onboarding and offboarding process
• Coordinated the replacement of hardware for equipment lease renewals and end-of-support windows
• Performed detailed diagnostics and troubleshooting of workstations and servers and facilitated the replacement of hardware component where required
• Documented comprehensive problem resolution instructions in incident management platform to ensure successful replication of results

Beijing, CN

• Provided administrative support such as maintaining accurate inventory of stationary and office equipment as well as record keeping and retention
• Assisted with planning and preparation of branch-wide special events
• Processed, verified, and maintained training attendance records and documentation
• Managed discount movie tickets program including monthly reconciliation of payments and submission to Accounting Department
• Assisted with recruiting activities such as prescreening resumes, coordinating interviews, and preparing interview reports for qualified candidates