Ryan Cummings Email & Phone Number

Hedgesville, Wv, Us

A Soar Analyst, also known as a Security Orchestration, Automation, and Response Analyst, plays a crucial role in enhancing an organization's cybersecurity posture. The primary responsibility of a Soar Analyst is to design, implement, and optimize Security Orchestration, Automation, and Response (SOAR) solutions. These solutions integrate various security tools, technologies, and processes to streamline incident response, automate repetitive tasks, and improve overall security operations.

Northern, Virginia, United States

Responsible for Security Information and Event Management (SIEM), Vulnerability Management, Incident Management & Response.(Splunk).Network Integrity operations. Evaluating Firewall response and PCAPS.Defense In Depth: Information security governance with 5+ years of security experience, identifying, analyzing, and mitigating risk.Worked on various GCP infrastructure implementation and design strategies and experience in implementing and designing salable cloud-based web applications using AWS and GCP.Hands-on Experience in Web Application penetration testing, Network Infrastructure Penetration Testing.

Fairfax County, Virginia, United States

• Operation and Maintenance of SQL Databases, Apache Web-server.• Apache Web Server Operations, Patching and Maintenance.• Proficient in understanding application level vulnerabilities like XSS, SQL Injection, CSRF, authentication bypass, weak cryptography, authentication flaws, etc.• REST API ingratiation web app implementations. • Work with compliance teams to support AWS cloud compliance with functional area specialists, cloud architects, and security specialists. • Provided security implementation for authorization, by controls like principle of lease privilege, relinquishing privilege when not in use, non-guessable tokens and forced browsing. • Conducted vulnerability testing using tools like Nmap, Nessus, Rapid 7 and analyzed reports made security recommendation to leadership.

Crystal City, Virginia, United States

- Categorized and prioritized vulnerabilities based on MITRE ATT&CK.- Managed vulnerability and compliance scanning tools (Qualys, Rapid7, Tenable).- Maintained security documentation and NIST compliance.- Monitored firewalls, enhanced security, and gathered threat intelligence.

Crystal City, Virginia, United States

• Categorize and prioritize vulnerabilities based on MITRE ATT&CK level and recommend remediation steps for different teams. • Responsible for implementing, configuring, and maintaining vulnerability and compliance scanning tools such as Qualys guard, Rapid7 and Tenable. • Maintaining, reviewing, and updating Information Security System documentation, to include but not limited to System Security Plan (SSP), Plan of Action & Milestone, Risk Assessment, policies and procedures, security control baselines in accordance with NIST guidelines and security practices. • Monitored traffic passing through firewalls and created new policies and helped to improve security concerns and blocked unnecessary traffic. • Threat intelligence collection using open source networks. • Investigate security incidents and recommend actions needed to resolve situations. • Security awareness training for new and existing employees. • Coordinate and manage team activities during assessment engagements.

Manhattan, Nyc

Responsible for digital assets in studio. Digital Archival and Apache server setup and maintenance. Website Creation and deployment.

Bfa Photography- School, Photography

Activities and Societies: Deans List.One of the most prestigious art schools in the country known for its degrees in Illustration.

Asa, Digital Photography

Activities and Societies: Student Government