Idely Lopez Email & Phone Number

United States

• Manages training, on-boarding, and education of SOC analysts. Creates new training materials, walkthroughs, and SOP’s for SOC analysts. • Provides direct support to SOC Director and SOC managers concerning SOC projects, operations, and processes.• Performs scheduling for SOC Director and US SOC manager. Provides feedback and recommendations for promotion of SOC analysts to SOC management, and provides mentorship to SOC analysts so they can achieve growth and reach goals.• Compiles… Show more • Manages training, on-boarding, and education of SOC analysts. Creates new training materials, walkthroughs, and SOP’s for SOC analysts. • Provides direct support to SOC Director and SOC managers concerning SOC projects, operations, and processes.• Performs scheduling for SOC Director and US SOC manager. Provides feedback and recommendations for promotion of SOC analysts to SOC management, and provides mentorship to SOC analysts so they can achieve growth and reach goals.• Compiles reports on training, onboarding. and analysts progression. Creates and coordinates schedules for new hires; ensures that training expectations are met and that SOC analysts access is established before transitioning to their final team assignment.• Attends weekly meetings concerning training, on-boarding, and SOC projects/education.• Troubleshoots immediate access issues for SOC analysts, communicates/coordinates with various internal SOC teams and clients to ensure that issues are resolved.• Analyzes and reassesses past security incidents, identifies patterns/reasons for missed incidents, and creates solutions that address the root cause issues. Translates solutions into SOP’s and videos to be used as a training resource/SOC analyst reference.• Provides on-call support for security incidents that require Spanish-speaker translation and escalation.• Communicates with clients concerning on-going security incidents, access issues, and issues concerning EDR tools. Provides answers to client questions and coordinates assistance from appropriate teams as needed. Show less

United States

• Utilize (SIEM) software, Network Intrusion Detection/Host Intrusion Detection Systems, Firewall and System logs to analyze security events; monitor and analyze alerts to ensure environment is secure.• Investigate indicators of compromise, triage issues utilizing top prioritization skills, and escalate eminent threats and/or signs of attack.• Analyze email security threats via Splunk or Microsoft Office 365 Security Center, perform packet analysis, and review reports of potential… Show more • Utilize (SIEM) software, Network Intrusion Detection/Host Intrusion Detection Systems, Firewall and System logs to analyze security events; monitor and analyze alerts to ensure environment is secure.• Investigate indicators of compromise, triage issues utilizing top prioritization skills, and escalate eminent threats and/or signs of attack.• Analyze email security threats via Splunk or Microsoft Office 365 Security Center, perform packet analysis, and review reports of potential malware detection. Perform blacklisting, whitelisting, and quarantine actions on confirmed threats.• Create and document all findings using detailed notes via Demisto ticketing system, separate false positive threats from true threats, and maintain constant communication with clients in the event of compromise.• Provide detailed updates and explanations to clients in both English and Spanish of urgent threats, events, and acts of remediation; act as primary incident handler/engineer.• Maintain strong knowledge of threat landscapes and security tools such as: Wireshark, AlienVault, Crowdstrike, Splunk, and Carbon Black.• Perform threat remediation utilizing programming/scripting languages by connecting to host via RDP session; decrypt programming/scripting languages as part of de-obfuscation.• Corroborate and work alongside escalation engineers; participate in training sessions and weekly meetings; review course of actions and provide suggestions to improve process and procedures. Show less

Fairfax,Va

• Performed routine system audits of security and application event logs to analyze log trends, identify problems, and verify the status of system functionality and effectiveness.• Utilized AD audit tools to review end user activities including failed logons attempts, logon location, time and source IP. Also, reviewed and monitored system administrators’ actions and activities.• Managed all anti-virus software and network vulnerability scanning utilizing ESET and Nessus Pro; created and… Show more • Performed routine system audits of security and application event logs to analyze log trends, identify problems, and verify the status of system functionality and effectiveness.• Utilized AD audit tools to review end user activities including failed logons attempts, logon location, time and source IP. Also, reviewed and monitored system administrators’ actions and activities.• Managed all anti-virus software and network vulnerability scanning utilizing ESET and Nessus Pro; created and reviewed monthly reports with this information as part of conducting vulnerability assessments. Mitigated various threats and verified that machines are checking into ESET anti-virus regularly.• Performed monthly hardware and software inventory reports via SCCM, pushed out updates/missing patches, and managed RDP sessions for workstations and servers.• Created and maintained all security related documents, including datacenter compliance reports; revised and updated Driven-Inc information security policies as needed.• Ensured critical endpoints are encrypted utilizing Symantec Full Disk Endpoint Encryption, performed monthly audits to ensure security compliance of all machines, and worked with third-party vendors on escalated encryption issues.• Assembled change management reports, reviewed recently released Microsoft updates, and confirmed that patches are being installed when released; documented all changes and sent for management review as part of security compliance routine.• Performed monthly server maintenance after hours, and provided support as a point of escalations for IT support team, assisted with helpdesk tickets, calls, and inquiries as needed. Show less

Mount Airy, Maryland

• Performed systems administration utilizing VMWare and Hyper-V for over 700 Windows and Azure servers, while also providing technical support to over 3000 end-users, and managing 25-40 tickets on a daily basis.• Performed network infrastructure support, managed firewall policies and configurations to ensure that clients stay active.• Performed administration of Citrix environment, built new servers, machine catalogs, and delivery groups, monitored all servers and verified that they do… Show more • Performed systems administration utilizing VMWare and Hyper-V for over 700 Windows and Azure servers, while also providing technical support to over 3000 end-users, and managing 25-40 tickets on a daily basis.• Performed network infrastructure support, managed firewall policies and configurations to ensure that clients stay active.• Performed administration of Citrix environment, built new servers, machine catalogs, and delivery groups, monitored all servers and verified that they do not revert to an unregistered state. Also managed configurations in WEM 47 and Director.• Created/ran Solarwinds reports, troubleshooted virtual desktop latency, and ensured correct versions of Citrix are being used.• Installed and configured Windows server to include physical and virtual servers, Active Directory, DFS, VMware ESX, and Vsphere.• Performed overnight duties such as managing data storage and clusters for SAN, responded to alerts and monitored SIEM logs.• Analyzed current processes for areas of improvement and develop new IT Practices and SOP’s to advance operations.• Mentored and coached newer trainees; offered guidance and direction to all engineers. • Developed trends by monitoring and analyzing incoming tickets, problems, and support requests.• Diagnosed and quickly resolved a wide range of Windows 10, Mac, applications, and networking issues to help minimize downtime.• Worked with vendor support contacts to resolve escalated technical issues within the desktop environment, and 3rd party applications.• Coordinated and ensured software upgrades and software packages are current, also ensured server maintenance, and that the proper amount of disk space is constantly available. Show less

Gaithersburg, Maryland

• Provided technical support to federal government clients such as United States Chamber of Commerce, Doyon Government Group, and over 750 non-profit organizations. Managed between 50-75 tickets daily, while providing systems administration support to over 300 servers.• Troubleshooted and resolved hardware, software, and network related issues across multiple OS systems (Linux, Windows 7, 8, 10 and Mac OS).• Utilized a pre-defined call and ticket management system, while updating and… Show more • Provided technical support to federal government clients such as United States Chamber of Commerce, Doyon Government Group, and over 750 non-profit organizations. Managed between 50-75 tickets daily, while providing systems administration support to over 300 servers.• Troubleshooted and resolved hardware, software, and network related issues across multiple OS systems (Linux, Windows 7, 8, 10 and Mac OS).• Utilized a pre-defined call and ticket management system, while updating and maintaining internal knowledge base.• Ensured the highest level of customer service and professionalism, while prioritizing request. • Worked alongside escalations engineers to effectively resolve complicated issues in a timely manner.• Monitored servers, SIEM, and assisted with on-boarding/off-boarding request; act as a liaison between client and 3rd party vendors.• Troubleshooted in depth applications, and performed extensive research to resolve issues at hand.• Acted as a first response in Emergency On-Call events, as well as provided assistance as a field technician when managing client sites.• Created incident reports for servers, sites, and important personnel. Ensured that all issues are resolved diligently while executing the role of incident manager and engineer.• Developed efficient processes and procedures for engineers, and created simplified step-by-step guides for end users.• Participated in new product research, development projects, server and file share migrations, and assisted with technical writing. Show less

Bachelor Of Technology - Btech, Cyber

Computer Engineering

A+ Certified

High School Diploma, Computer Programming