• Monitored networks using Splunk SIEM to identify and neutralize malicious activities.• Identified and mitigated network security risks by performing detailed reviews of IDS/IPS events, effectively pinpointing anomalous activities and potential attack vectors.• Actively participated in daily stand-ups and handover meetings, collaborating with cross-functional teams to track and address emerging cybersecurity threats.• Conducted in-depth data analysis to identify and predict developing threat patterns, contributing to proactive threat mitigation strategies.• Utilized CrowdStrike EDR to quarantine and remediate compromised endpoints, preventing further spread of threats and minimizing operational disruptions.

Trained in over 525+ hours of intensive classroom and lab-based training and gained extensive knowledge and hands-on experience in a wide range of security concepts including;• APPLICATION SECURITY — OWASP Top 10, XSS, CSRF, CORS, SQLi, DoS & DDoS, Vulnerability Scanning• CRYPTOGRAPHY — Stream & Block Ciphers, OpenSSL, Certificate Management, Symmetric & Asymmetric• GOVERNANCE, RISK, & COMPLIANCE (GRC) — Frameworks, Artifacts (Strategy, Policies, Standards, Guidelines and Procedures), Risk Management, Incident Response; Plans and policies concerning GRC requirements including HIPAA, PCI-DSS, NIST 800-53, FedRAMP, Cyber Kill Chain, FISMA • LOGS & DETECTION — SIEMs (Splunk), IoCs, Log Types, Databases, Normalization, Regular Expressions (RegEX), Hunting, Alarms & Reports, Investigations, User and Process Monitoring• NETWORKING — OSI & TCP/IP Models, Routing, Protocols, Encapsulation, Framing, NAT Networks, VLANs • NETWORK SECURITY — Wireshark & Filters, Port Forwarding, VPNs, Port Scanning, Bind & Reverse Shells, IDS / IPS, Firewalls and WAFs, Rule Writing, Vulnerability Management, MITM Attacks, DNS Security • STRATEGY & ANALYSIS — Strategic Planning, Leadership, Operational Design, Decision Making Cycle • SYSTEMS — VMs, x86/ARM Architecture, Linux, Windows, Memory, Storage, Python, Cloud • SYSTEMS ADMINISTRATION — Windows, Unix/Linux, VyOS • SYSTEMS SECURITY — OWASP Secure Coding Practices, Input Validation, Session Management, Encoding, Debugging, Buffer Overflows, Code Injection, Cloud Security Infrastructure, Hypervisors • THREAT INTELLIGENCE — CTI Sources and Methods, Threat Actors, Social Engineering, CTI Cycle & Process, Cyber Kill Chain, CTI Diamond Model, Cyber Mission Analysis