Vince Aaron De Leon Email and Phone Number

Investigates, reports and resolves security Incidents and works alongside Tier 3 Analysts to provide security coverage for the client. Analyzes URLs, attachments, security and network logs and provides the appropriate blocks for indicators of compromise.Experience:• 24x7 remote shifting set up• has worked for financial/insurance clients• experience working in a SOC team• experience reporting worked on cases on a daily call• works with team to create playbooks/proceedures to follow• provides turnovers/handoversDaily tasks include but not limited to:• Phishing Email assessments • Log Source Analysis• User Activity Behavior• Endpoint Modification Escalations• DGA and Network Traffic• User Network Logs• External Intelligence Analysis• URL and File Analysis

Primary Role: CTI Analyst • Works in a 24x7, 12-hour shift rotation• Works mainly on Incident Management via Cyber Threat Intelligence (CTI) using Swimlane, Intsights, and external detections following the runbook/playbook.• Investigates and analyzes different threats such as Dark web, Credit Card Leakage, Social media takedowns, System Vulnerabilities, Data and Account Exposures and Phishing Domains.• Escalates/ creates Incident Response Reports and communicates the security incidents to respective Sales Finance Companies (SFC) of the findings.• Keeps track and responds to created tickets via Swimlane, Outlook external emails and Digital Care.• Investigates and Escalates DLP Alerts via Microsoft Defender for sensitive information and communicates with the Client Human Resource.Tools used:Microsoft Defender, WhoIS, Intsight Rapid 7, SSL Checker, Cisco Talos, Windows Sandbox, URLscan, Cyberchef, CrowdStrike Identity Protection, Active DirectorySecondary Role: SOC Analyst: • Performs Triages for EDR and SIEM Alerts for Tier 2s using Qradar, Crowdstrike, Exabeam and Qualys Reports.• Familiarity with the use of playbooks.• Performs Health Check reports on system based on Proofpoint, Qualys, NMS McAfee and Trellix, Veritas and sends reports via Email.• Performs IAM management via Proofpoint.• Monitors Email and Ticket Responses.• Analyzes Network Logs

Developed School Management System for Cerebro DOST project prototype | via Bubble.io- Included Database Management for Restricted User access for specific pages* Handling of LMS Integration from current prototype to Cerebro LMS website (Partial)* Partial Grade Book / Records* Generation Report

- Performed Health Checks to Client Servers- Uploaded and Backed up Data for Client Servers- Handled Emergency Tasks assigned by Product Chief Officer