⦁ Performed in-depth, second-level analysis of security threats, including malware and advanced persistent threats (APTs). Proficient in examining and interpreting security logs, network traffic and system logs to identify indications of compromise (IOCs). ⦁ Executed containment and mitigation strategies, including IP/URL and subnet blocking, sender and telecom blocks, host isolation, and MAC address blocking, to effectively neutralize security threats and prevent further incidents.⦁ Leveraged EDR tools for advanced endpoint analysis, identifying malicious processes and accurately distinguishing between malicious and benign parent-child process relationships, enhancing overall threat detection and incident response capabilities.⦁ Conducted in-depth phishing analysis on 80+ user-reported emails weekly, consistently identifying and mitigating phishing threats, reducing one of the most commonly exploited entry points into organizational networks and systems.⦁ Monitored security tools and platforms, including firewalls, Azure, AWS, authentication logs, Trellix, Carbon Black App Control, and EDR, ensuring uptime and proper log ingestion into Splunk for accurate threat detection and continuous monitoring.⦁ Weekly work average consists of 100+ Splunk security alerts, 130+ tickets reviewed and 1 incident case escalated to Cyber Incident Response Team (CIRT) per week.⦁ Mentored and trained six Tier 1 analysts on investigation techniques, effective documentation processes, and strategies to enhance overall performance. Provided ad-hoc re-training to reinforce established procedures, ensuring all questions were fully addressed to promote continuous learning and improvement.

• Performed a variety of log analysis and threat hunts using Splunk Enterprise.• Reviewed Network traffic using Packet captures.• Reviewed endpoints using Carbon black EDR and Protection.• Utilized multiple open-source platforms to conduct reconnaissance on malicious actors and threats• Triaged and escalated critical cases to appropriate teams and personnel.

• Obtained Secret Level clearance to access government systems and have administrative rights• Experience with Remedy ticketing Application for documenting issues with end users• Managed FAA employees, contractors and external users and computers in Active Directory • Assisted FAA Users in setting up new computers and mobile devices such as iPads and iPhones• Performed password resets for FAA government employees and external end users• Troubleshooted various networking, web applications and software applications errors, failures, and configurations For FAA employees, contractors, and external users• Enforced FAA security policies and advised best security practices for FAA end users