Sam Joy Email & Phone Number

I am an aspiring security researcher working at Ford as a Cyber Defense Analyst, learning and helping to resolve real-world cybersecurity threats.Received recognition from the following organizations for reporting Application Security Risks.➤ Google➤ Facebook-Backend Cryptocurrency project Diem➤ Apple➤ Microsoft➤ Amazon Web Service➤ United Kingdom Government➤ Tesla ➤ HackerOne - 300+ reputations | 250+ Private Invites | 8 Hall of Fame➤ Bugcrowd - 12 Hall of FameGitHub Link: https://github.com/samjoy26/Achievements

Listed skills include Python, Networking, Security Research, Server Management, and 4 others.

• 

  Cyber Defense Analyst

  Ford Motor Company

  Dec 2021 - Present - Chennai, Tamil Nadu, India

  • Received a promotion and award for excellence in threat hunting by identifying the absence of detection rules for a specific MITRE ATT&CK technique under the Exfiltration and Credential Access Tactics. Developed a custom script to simulate the technique and promptly addressed security gaps by creating defenses, which strengthened the organization's overall security posture.• Tuned the "Exfiltration: BigQuery Data Extraction" rule in GCP, reducing false positives that had peaked at… Show more • Received a promotion and award for excellence in threat hunting by identifying the absence of detection rules for a specific MITRE ATT&CK technique under the Exfiltration and Credential Access Tactics. Developed a custom script to simulate the technique and promptly addressed security gaps by creating defenses, which strengthened the organization's overall security posture.• Tuned the "Exfiltration: BigQuery Data Extraction" rule in GCP, reducing false positives that had peaked at over 1,000 per quarter. Identified discrepancies in functionality through attack simulations based on Google documentation, escalated the issue to Google, and facilitated the rule's temporary disablement until a more effective solution was implemented• Automated the validation of bulk suspected user AD accounts in a credential leak case, significantly reducing incident response time. Created a custom Python script to cross-check large volumes of accounts against Azure AD (a feature not natively supported), eliminating invalid accounts and enabling efficient password resets for valid accounts. Show less