Pacifico Mina Email & Phone Number

Santa Barbara, California, United States

As a SOC Lead, I efficiently lead a dedicated team comprising SOC analysts 1, SOC specialists, and SOC 2 personnel, delivering 24/7 security operations services to diverse clients, including major financial institutions and well-known healthcare organizations. Our services encompass incident response, tailored use case development, incident analysis, reporting, mitigation, remediation, and effective management of multiple endpoint solutions.In my capacity as SOC Lead, I actively engage in understanding each client's distinct processes and procedures, guaranteeing that my team consistently meets intricate and varied service level agreements (SLAs) for their respective contracts. A crucial aspect of my role involves optimizing SOC analysts' procedures to enhance efficiency, implementing alarm automation for specific scenarios to minimize analyst fatigue, resolving SIEM-related issues for uninterrupted 24/7 coverage, and providing mentorship and training to the SOC to ensure the highest level of client care and team efficiency under my responsibilityI possess hands-on experience in setting up LogRhythm and Azure Sentinel instances, significantly elevating their security maturity posture from initial stages to a mature and well-secured environment. This involved configuring collectors, enabling firewall syslog logging, and implementing various other security measures.I have assisted clients in efficiently collecting logs from extended Detection and Response (XDR) / Endpoint Detection and Response (EDR) tools like Microsoft Defender for Endpoint, SentinelOne, and Palo Alto Networks. Ensuring proper ingestion of these logs within the SIEM was a key aspect of my responsibilities.I have a proven track record of creating and maintaining SIEM detection rules in alignment with the MITRE ATT&CK framework, leveraging diverse sources such as Windows event logs, Okta, Duo, SentinelOne EDR data, and more to strengthen the organization's cybersecurity posture.

Santa Barbara, California, United States

- Manage and maintain high-value clients' SIEM environments, both front end and back end, to ensure company security.- Served as the primary liaison between the Security Operations Center (SOC) and clients, delivering exceptional customer service and stakeholder management.- Proven ability to conduct thorough investigations and fulfill special requests for security incidents and audit inquiries.- Lead the development of a new Azure Sentinel SIEM environment to improve the company's security posture.- Highly skilled in log source onboarding and offboarding, building and tuning multi-block AIE rules, conducting data and environmental trend analysis, and designing and implementing effective workflows.- Offered expert guidance on SIEM maturity and contributed to achieving compliance with leading frameworks, including MITRE ATT&CK, ISO27001, NY-DFS, and NIST.- Develop, update, and maintain comprehensive and user-friendly Standard Operating Procedures (SOPs) for SIEM Environment incident response, ensuring consistency and efficiency in handling security incidents.- Served as a subject matter expert, and mentor, providing ongoing support and mentorship to junior team members, helping them to develop their skills and advance in their careers.

Santa Barbara County, California, United States

- Utilize Splunk, LogRhythm, Azure Sentinel, AlienVault, and other security information and event management (SIEM) platforms to monitor and investigate security incidents for high-value clients.- Conduct thorough investigations on a variety of incidents, including malware attacks, authentication failures, payload attacks, admin configuration changes, and successful brute force attacks.- Identify key issues and indicators of compromise (IOCs) from incident investigations and provide recommendations for risk mitigation.