• Monitor cyber security tools like Crowdstrike, Azure, Microsoft Defender to identify, triage, and report security incidents to customers.• Leverage available cyber security capabilities to contain security incidents to prevent the lateral spread of malware or lateral movement of attackers.• Conduct cyber security investigations to identify and rule out false positive security incidents.• Provide additional cyber security investigatory support to customers as needed• Perform data analysis• Review cybersecurity industry best practices• Explore policy and procedure and provide input in identifying areas of improvement based on research• Participate in collaborative group project with internship cohort

• Created, maintained, and monitored user accounts in accordance with organizational policies and procedures. • Coordinated with external vendors providing IT services such as cloud hosting providers, managed service providers, ensuring their compliance with organizational security requirements. • Monitor SIEM tool like Splunk, LogicAlert to analyze security alerts and IOCs on a network of 500+ endpoints• Investigate an average of 20 security incidents per week using EDR and SOAR tools • Assist in preparing for security audits and compliance assessments, reducing identified vulnerabilities by 30% in first 2 months• Contribute to the development, documentation, and maintenance of security policies and procedures. • Collaborate with IR team to develop and refine incident response plans and procedures

Configured Qualys Vulnerability Scanner, identifying and remediating 10,000+ vulnerabilitiesCreated and maintained comprehensive documentation of all departmental processes, procedures and workflows.Scanner to identify systems security flaws on critical systems, reduce risk, and allow company to be PCI DSS compliant.Developed and implemented process improvements to increase efficiency, reduce costs and improve customer service.

• Maintained knowledge of remote desktop connections, peer-to-peer file sharing, and other applications associated with remote IT assistance.• Gained experience with User account management in Active Directory and Group policies in SCCM.• Resolved problems within Microsoft products (Outlook, Excel, Office 365, Visual Studio code).