Andrew Saul Email & Phone Number

• Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation.
• Identify potential, successful, and unsuccessful intrusion attempts and compromises thorough review and analysis of relevant event details and summary information.
• Conduct investigations of computer security violations and incidents, reporting as necessary to management.
• Review initial detect analyst’s findings
• Coordinate remediation actions and activities.
• Prepare incident reports of analysis methodology and results.

• Review initial SOC analyst’s findings
• Conduct further investigation on events/incidents
• Coordinate remediation actions and activities with multiple groups
• Coordinate data spill remediation activities with multiple groups and/or agencies
• Conducted one on one training with new employees
• Provided policy recommendations to leadership regarding security of information and information systems

• Monitored network traffic and investigating any notable events that generated an alert.
• Investigations of events included reviewing various logs to determine the nature of the suspicious traffic being alerted on.
• Performed dynamic malware analysis.
• Create event/incident reports detailing findings, providing artifacts supporting analysis, and suggest possible remediation measures that maybe required.
• Reviewed the reports that were created by team members, editing them as needed, adding whatever supporting evidence that is missing, and submitting the report when it was ready.
• Analyze false positive events to see if that particular event's behavior is a candidate for tuning than submitting a request to eliminate that event from being alerted on.

• Checked the health of the IDS and IPS sensors and then producing a report stating the sensors condition and emailing the report out to the team and leadership.
• Monitored network traffic and investigating any notable events that generated an alert.
• Investigations of events included reviewing various logs to determine the nature of the suspicious traffic being alerted on.
• Create event/incident reports detailing findings, providing artifacts supporting analysis.
• Analyze false positive events to see if that particular event's behavior is a candidate for tuning than submitting a request to eliminate that event from being alerted on.

• Check the health of the IDS and IPS sensors
• Produce a report stating the sensors condition and emailing the report out to the team and leadership.
• Monitored network traffic and investigated notable alerts.
• My investigations included reviewing various logs to determine the nature of the suspicious traffic and identify what malicious activity occurred.
• For any confirmed malicious activity a report was created which detailed what happened, provided evidence confirming my findings.

Burtonsville, Maryland

Burtonsville, Maryland

Master Of Science - Ms, Information Technology

Bachelor Of Science - Bs, Cybersecurity