Cyber Security Professionals Resume Examples

⦁ Uncovered potential risks and vulnerabilities by conducting security audits.

⦁ Enhanced customer satisfaction by ensuring swift resolution to any bugs/issues across server and website. 

⦁ Regulated internal access to secure sensitive/confidential information, while monitoring use of data files.

⦁ Oversaw prioritisation of events in line with set SOPs whilst investigating, escalating, and reporting overall events within one hour during all shifts.

⦁ Liaised with relevant departments to resolve incidents effectively and quickly along with supporting team to maximise effectiveness of incident response time.

⦁ Researched and uncovered knowledge bases and existing information for prompt resolution of issues, as well as investigated all incidents via open-source online materials.

⦁ Updated and evaluated several use CASES and SOPS, redrafted and upgraded as per requirement due to processes transformation. 

⦁ Delivered exceptional contribution to training and development of new shift members regarding identification and resolution of potential activities in channels.

⦁ Transmitted incidents on to the next shifts for further investigation, managing each incident’s progression and leading shift handovers. 

⦁ Accomplished excellent productivity on CAT study plan, combining official instruction with own open-source research.

⦁ Identified and decreased vulnerability footprint and vulnerabilities risks during new systems migration. 

⦁ Collaborated with partners to ensure on time resolution of discovered vulnerabilities, as well as provided updates in high-level daily briefings.

⦁ Supervised team to discover footprint on compromised network and potential impact on MOD infrastructure by gathering and compiling data on number of networks and locations, enabling threat teams to conduct testing during site visits.

⦁ Served as key point of contact within Global Operations Security Control Centre (GOSCC) for military command and service delivery partners, ensuring constant communications and customer service presence.

⦁ Reviewed and prioritised work allocation across the team to meet with business needs.

⦁ Assessed, uncovered, and resolved issues with initial reporting processes and streamlined and improved their effectiveness, which resulted in efficient and more accessible reporting functions.

⦁ Conducted digital forensic analysis across Windows, Mac, and Linux platforms. 

⦁ Responded and mitigated incidents reported to Computer Security Incident Response Team (CSIRT), such as malware intrusions, advanced persistent threats, insider threats, and eDiscovery.

⦁ Carried out endpoint detection analysis of incidents by utilizing several EDR platforms, such as Carbon Black, CrowdStrike, MDATP, ELK, Splunk, and DLP solutions.

⦁ Assisted Security Operations Center (SOC) analysts in Indicator of Compromises (IOCs) and threat intelligence to perform proactive hunting engagements from incidents. 

⦁ Involved in hiring process by conducting technical interviews for analyst and intern positions

⦁ Developed and maintained pro-active threat hunting capabilities for malicious activities on host and network enterprise environments, as well as AWS and Azure cloud environments. 

⦁ Analyzed and determined requirements for in-depth analysis by performing initial assessments of type and extent of intruder activities.

⦁ Oversaw efficient management of event database, including recording and escalating suspicious events based on incidents classification.

⦁ Achieved promotion to Security Analyst II through exceptional performance.

⦁ Delivered feedback regarding efficacy of features, capabilities, and overall performance by reviewing vendor products.

⦁ Acted as technical resource and mentor to colleagues across the company.

⦁ Maintained on-site computers and printers, as well as delivered exceptional data and system support.

⦁ Carried out strict action against breaches of tenancy in accordance with set Stonham’s policies and procedures.

⦁ Directed routine functions involved in management services, comprising tenancy signups, voids management, housing inspection, and ABS management.

⦁ Examined health and safety standards as per set requirements, comprising weekly panic and fire alarm testing.

⦁ Served as key point of contact for customers and maintenance contractors working on ECHG schemes in Edmonton.

⦁ Delivered quality repair service to ECHG tenants, while raising work orders and logging repairs on academy by utilizing SOR Codes.

⦁ Finalized FIPS 199 workbook and determined high-water mark.

⦁ Developed Requirement Traceability Matrix (RTM) and documents, enabling evaluation, approval, and rejection of controls by utilizing NIST SP 800-53A guide.

⦁ Evaluated A&A package items by utilizing NIST guidance for FISMA compliance, including System FIPS 199 Categorization, e-Authentication Assessment, PTA, PIA, Contingency Plan (CP), and Contingency Plan Test (CPT).

⦁ Established Security Risk Assessment (SRA) documents and Security Impact Analysis (SIA) Reports through NIST SP 800-53 and FIPS 199.

⦁ Supervised efficiency of security controls through set NIST SP 800-137 guidelines.

⦁ Assessed, analyzed, and updated implementation of system security plan statements involving relevant controls to assign systems by using NIST 800-18.

⦁ Evaluated Project Level Critical Control (PLC) workbook, as well as interviewed key technical leads to confirm deployment of  critical controls by utilizing NIST SP 800-53 standards.  

⦁ Spearheaded risk controls documentation across vendor risk scorecard as per set Third Party Risk Management (TPRM) Policy and Risk Assessment Matrix. Reviewed multiple outsourced products/services associated with risks and criticality.

⦁ Analyzed several questionnaires and supportive documentations to authenticate vendor specific deployment of information security controls.

⦁ Developed and maintained user stories and strong product backlog by collaborating with team owner and team members.

⦁ Configured and deployed Splunk for easy scalability with simple amendments with configuration file.

⦁ Designed and deployed dashboards to enable Directors to oversee and manage user auditing, incident response event auditing, and various client metrics by gathering and analyzing information through Splunk.

⦁ Planned and implemented redundant storage to comply with NIST guidelines as well as DoD and clients’ requirements.

⦁ Devised and deployed three separate Network Attached Storage (NAS) servers to manage and organize hot, warm, and cold data storage while syncing to highly secured and encrypted private cloud storage.

⦁ Automated deployment of Splunk universal forwarders on endpoint through Windows Group Policy Update as well as enabled Security Operations Center (SOC) to monitor client’s endpoints by developing two custom PowerShell scripts.

⦁ Deployed a full custom Splunk environment handling over 5,000 endpoints containing three indexers, four search heads, one deployment server, one search head deployer, one cluster master, one monitoring console, and two license masters with one as redundant backup.

⦁ Deployed Docker in a fully containerized environment by configuring Splunk in virtual machines, which helped company to save money on hardware resources while providing environment with easier maintenance.

⦁ Configured and deployed Virtual Private Networks (VPNs), Firewalls, and Intrusion Prevention Systems (IPS) to secure fitness team network.

⦁ Supervised high-performance team while ensuring team adhere to defined security protocols in reducing attack surface.

⦁ Evaluated, configured, and implemented Splunk in line with customized companies’ requirements of clients tracking with gym, including fitness class attendances, customer support interactions, and status of their goal completions.

⦁ Steered scrum ceremonies including daily stand-up meetings, sprint reviews, sprint retrospectives, and sprint planning meetings. Liaised with team velocity and sprint/release progress within established reporting framework.