Lee Nader Email & Phone Number

Dallas, Tx, Us

Plano, Texas, United States

Triage and investigate alerts via CORR (CriticalStart’s proprietary solution built on the Elastic Stack) and over 13 other security consoles, including Microsoft 365 Defender, SentinelOne, and CrowdStrike Falcon.Perform security actions within client consoles, including password resets, access revocation, file quarantine, and email management.Conduct in-depth correlation of complex security events, such as tracking malicious messages across multiple factors (IP addresses, login locations, timestamps, and unusual account activity).Analyze, document, and escalate threats within tight time constraints (often under an hour), providing detailed reports and guidance to clients.Identify and filter benign events, developing automation to reduce alert fatigue and enhance response efficiency.Learned and applied touch-typing to improve response times.Thrived under high-pressure SLAs (60-minute response time) while maintaining a professional and client-focused approach.Provided coaching and training for new analysts at their request, recognized for clear explanations and a collaborative teaching style.Produced high-quality technical documentation.

VMware: • vSphere ESXi7: deployed, migrated, and performed rolling reboots of hosts. • Created, updated, maintained and tuned GM (Gold Masters) for Instant Clones and Persistent VDI. • Horizon 8: created and maintained Instant Clone Pools, images, and snapshots. • AppVolumes and AppStacking: created AppStacks; reviewed and edited configuration files. • Dynamic Environment Manager (DEM): escalated privileges, diagnosed performance of apps. • Cisco Blade Server: reloaded ESXi, migrated server between VLANs.Microsoft Windows Server: • Deployed and decommissioned servers. • Managed file and print shares, hidden shares, Group Policy and ADMX installations, DNS, WSUS for updates. • Audited Active Directory user logon scripts. • Edited user permissions using Azure Active Directory. • Installed Microsoft Office 19 / 365 using the Online Customization Tool and Content Delivery Network (CDN) • Wrote PowerShell scripts to add new users to Active Directory and update passwords. • Configured enterprise settings for Google Chrome using Group Policy. • Monitored server status using WhatsUp Gold.

5875 Trinity Pkwy #300 Centreville, Va 20120

• Separated due to pandemic downsizing. • Worked as a NIST Framework Detect Analyst. • Monitored alerts in Splunk Enterprise Alert Manager. • Used the following tools for threat hunting: FireEye, Redline, McAfee EPO, PaloAlto Panorama, AWS GuardDuty, ProofPoint, Nexpose, CarbonBlack, and Salesforce. • Monitored local, WAN and Cisco AnyConnect and PaloAlto GlobalProtect traffic. Accomplishments: • Assisted the Detect team in evaluating the following tools for Parsons: DarkTrace, ExtraHop, Cisco StealthWatch, and Falcon CroudStrike, resulting in Parsons subscribing to CroudStrike. • Co-wrote SOP documentation for the Detect team, and presented it to the Cybersecurity department via WebEx. • Assisted in QA and tuning for Parsons emergency transition from Splunk to Splunk Enterprise, reducing alerts from 100,000 a day to approximately twelve a day.

Carrollton, Texas, United States

• Consulted, purchased, upgraded, and replaced computer parts. Reloaded OS and drivers. • Configured standalone wifi access points / DHCP servers. • Built basic SOHO servers. • Installed Windows 10, 8 and 7, CentOS and Ubuntu Linux. • Configured basic Group Policy GPOs. • Used Linux utilities to diagnose hardware failures and recover data from corrupted drives. • Wrote CMD files to automate full and incremental backups using robocopy.

Dallas, Texas, United States

• Resumed previous job after returning from deployment with US Army.• Provided asset management, desktop and laptop monitoring, support, deployment, and user migration.• Supported Macintosh Apple OSX, Windows 7, 8, 10 & Microsoft Office, Juniper VPN, iOS and Android devices.• Conducted phone and desk-side training, triage, and issue resolution.• Secured Mobile PCs with hard drive encryption.• Developed preventative measures and documented solutions for common issues.• Created user Active Directory accounts.• Deployed Cisco IP phones.Accomplishments:• Optimized resources by virtualizing physical workstations, both with VMWare and Virtual PC. Took the Trading department from two workstations per user to one each.• Increased productivity of all MIS Departments by troubleshooting, recording and cataloging enterprise-wide DNS errors.• Traveled to New York City to deploy all hardware needed for the new branch office.• Received Recognition of Customer Service Excellence award: February 2009.

Camp Taji, Iraq

• Reactivated as part of the Army Individual Ready Reserve (IRR) • While deployed in Iraq, converted a tank garage into a productive office environment for the Senior Command of B Co 155th ABCT. Deployed mission critical Command Center machines.• Installed network hardware, deployed and supported workstations, and installed updates in accordance with Department of Defense (DoD) security standards for Secret Classified information.• Designed Sharepoint sites and managed user access and permissions.• Supervised 2-person night crew.• Ensured data was backed up for return stateside.

• See details above.

Bachelor'S Degree, Intermedia/Multimedia

I was the first student to graduate from this program.

Associate Of Arts - Aa, Digital Communication And Media/Multimedia