Cyber Security Analyst
- Integrated on-premises Active Directory with Azure AD, streamlining identity management across hybrid environments- Conducted penetration testing on target servers using the Cyber Kill Chain framework, uncovering critical vulnerabilities including SQL injection and privilege escalation- Utilized tools such as Nmap, Gobuster, and Nikto for thorough network reconnaissance and web application security assessment- Exploited discovered vulnerabilities to demonstrate potential attack vectors, including gaining unauthorized admin access and SSH credentials-Implemented Azure Active Directory and enforced Multi-Factor Authentication (MFA) for enhanced security across the organization's cloud infrastructure-Created and delivered security training modules, focusing on social engineering, insider threats, and password management to mitigate human-centric security risks- Developed and executed a comprehensive security awareness program, targeting human-factor vulnerabilities such as phishing and insider threats, resulting in improved employee engagement and behavior changes- Collaborated with a cross-functional team to ensure seamless integration of cloud infrastructure, security configurations, and incident response, driving a collective improvement in cybersecurity practices