Security Analyst Experience

 LinkedIn *    GitHub 

PROFESSIONAL SUMMARY:

I'm an Inspiring Cybersecurity professional with a passion for vulnerability analysis, threat hunting, and incident response. I am using tools to develop my Information Security knowledge/skills including Track Hack Me, Cybrary.it, Udemy, and Evolve Security Academy for continual security development.

CERTIFICATIONS:

Certified Information Systems Auditor (CISA) - In progress

EDUCATION:

Evolve Security Academy: Cybersecurity Program 

Colorado Technical University: Bachelor of Science in Information Technology, December 2018

CYBERSECURITY PROJECTS/LABS EXPERIENCE:

VirtualBox Home Lab:

· Set up and configured a virtualized lab environment using VirtualBox, including network topologies, DHCP, DNS, Active Directory, web servers, and database servers.

· Simulated network failures, security breaches, and disaster recovery scenarios.

· Utilized Iperf and Wireshark to generate and capture network traffic and simulated a DoS attack using Hping3.

· Developed skills in virtualization, network administration, and disaster recovery planning.

· Managed and maintained the lab for 6 months as an independent project.

Active Directory Bulk User Creation:

· Developed and deployed bulk scripts for automating user accounts' provision, maintenance, and de-provisioning in an Active Directory environment.

· Utilized PowerShell and Active Directory to create new user accounts, modify existing user accounts, remove, or disable user accounts that are no longer needed, and provided feedback on the status of the script's actions.

· Successfully deployed the scripts in a production environment, resulting in improved efficiency and accuracy in managing user accounts.

FIM (File Integrity Monitor:

· Developed and implemented a file integrity monitoring system using PowerShell to detect and alert unauthorized changes to files and directories on a computer or network.

· Utilized the Get-FileHash, Compare-Object, and Send-MailMessage cmdlets to calculate the hash value of files, compare the current hash value with the previous hash value and send an alert email if the file has been modified.

· Utilized the Windows Task Scheduler to schedule the script to run at specific intervals.

· Utilized the Get-ChildItem cmdlet to check all files in a directory and all its subdirectories.

· Improved the overall security of the company's systems by detecting and alerting unauthorized changes in a timely manner.

Cybersecurity Detection & Monitoring Lab:

· Designed a virtualized home lab network to test vulnerabilities and practice threat detection.

· Utilized PFsense, Splunk, Kali Linux, Security Onion, and an Active Directory environment to simulate a small enterprise network.

· Simulated offensive and defensive tactics for adversary emulation and incident response practice.

Azure Cloud Detection Lab:

· Configured and deployed azure resources including Sentinel to detect attacker persistence on a virtual machine.

· Created a custom analytics rule to generate security alerts for virtual machine activity.

· Utilized KQL for log querying and MITRE Adversary TTPs and Mitigation Procedures.

AWS Incident Response Lab:

· Performed incident response on a compromised AWS account using CloudTrail logs and JQ.

· Identified a compromised AWS Bucket, IAM User, and other indicators of compromise.

Threat Detection with YARA Lab:

· Produced YARA detection rules by manual collection of simulated malicious document IOCs.

· Used yarGen to produce YARA detection rules for simulated malicious documents.

· Examined produced YARA detection rules with Arya (a tool that creates fake-malicious files).

EXPERIENCE:

Indecomm Global Services

Support Analyst L2 – March 2022 to April 2023

· Supported the cybersecurity team with security infrastructure deployment and monitoring.

· Designed a PowerShell script to automate employee onboarding and offboarding, increasing the speed and efficiency of both processes. 

• Trained end-users on cybersecurity best practices and provided technical support as needed.

Professional Association:

Association of United States Army (AUSA)

CyberSC (Cyber*SC) 

VetSec (VeteranSec)