Detecting compromised accounts using real-time data from latest data breaches via ThreatStream and cross-referencing with internal data via SQL query.Forensic investigation of network traffic and Kerberos tickets via Kibana to detect indicators of compromise.Data loss prevention (DLP) monitoring on endpoints, cloud shares, and email.Phishing defense and remediation.Coordinating investigations with other internal cyberdefense teams.

User & Entity Behavior Analytics (UEBA) using Exabeam Advanced Analytics to review behavioral histograms.Threat hunting to monitor and investigate anomalous user and entity behavior and abnormal access.Threat triage and whitelisting.Account-takeover (ATO) defense, proactive monitoring and recovery of potentially-compromised accounts.Virus and malware tracking and remediation through Cylance and FireAMP.

Managed corporate user accounts and permissions across diverse global testing and production systems and networks, including identity management systems, Microsoft applications suite, and global distribution systems.Trained new technical support team members in processes, procedures, and systems.Recognized with 5 awards for excellence in quality control.Collaborated with Account Security team to maintain detailed compliance reporting and documentation in accordance with Sarbanes-Oxley, General Data Protection Regulation (GDPR), and industry protocols. Prioritized, assigned, tracked, and resolved user service requests while providing excellent customer service, including time-sensitive account and access deactivations for terminated users.Supported automation rollouts and bulk migrations for new domains; conducted User Acceptance Testing (UAT) via SQL query, provided bug reporting, and established end-user production accounts.

Administration of digital permissions on the corporate network via Active Directory, including creating, provisioning, and managing individual and group user accounts.Developed and maintained instructional manuals and standard operating procedures for supported applications and tools.Ensured data security in a global production environment through broad spectrum of management applications, including Sailpoint IIQ, Microsoft Admin Center, Microsoft Exchange, and System Center.