Senior Security Analyst Resume Samples

Description :

1. Performed on Security devices of client's network for an as-is migration.
2. Prepared the low level and high level of the new DC design and BOM for device procurement.
3. Prepared the entire configuration to be applied to new Cisco ASA devices.
4. Managed Security Operation defines the architecture, solution model, and key processes for the way the services are delivered within the global Infrastructure Outsourcing Delivery Centers and Client Operations.
5. Communicated with management to ensure proper action taken and proper access provided.
6. Responsible for managing and completing all change tickets for all mainframe security events.
7. Provided support and recommendations for securing sensitive data in accordance with glba, nppi, and sox requirements.

Experience

0-2 Years

Level

Entry Level

Education

MBA

Description :

1. Architects and implements comprehensive alerting and workflow related to security events.
2. Serves as key stakeholder in Incident Management processes.
3. Collaborates with other team members in providing Vulnerability Management and Assessment (host, network, application).
4. Works with internal and external audit teams to provide support for annual audits and control reviews.
5. Provides support directly to CISO and other key business stakeholders.
6. Manages the implementation of an enterprise SIEM Proof of Concept for Gartner's top right quadrant SIEM products Logging
7. Designs alerting, communications, workflows, and training of other IT users.
8. Assists in engineering integration to other key security systems (IPS, Ticketing, etc.).

Experience

2-5 Years

Level

Junior

Education

BS

Description :

1. Monitors and remediates any security device or performance issues.
2. Monitors the release of vendor firmware and security updates.
3. Formulates a deployment strategy for security monitoring devices and execute the plan as required.
4. Supervises the reporting of the deployment success/failure results.
5. Provides third-tier support to Help Desk Analysts.
6. Provides technical support to the Information Security Manager on security incident response.
7. Documents and updates security monitoring/management device configurations.
8. Evaluates DoD security tools; determine compatibility issues with existing network configuration/infrastructure, and present conclusions to management.

Experience

5-7 Years

Level

Executive

Education

Bachelor's

Description :

1. Manages assigned caseload of disability claims for leave management, absence management, short or long term disability. This includes Blanket Lines claim management.
2. Inputs claimant medical and demographic data;
3. Evaluates claimant eligibility;
4. Develops plan to address disability obstacles and plans with claimants, attending physician and employer;
5. Monitors medical condition of claimant, discusses return to work with employer;
6. Integrates individual rehab/return to work plans into ongoing medical treatment;
7. Monitors social security decisions and other disability income benefits;

Experience

2-5 Years

Level

Junior

Education

Bachelor's

Description :

1. Worked in the NOC at times to backup engineers Updated cyber security manuals to updated cyber security best practices.
2. Maintained and support the operation of the network and it security infrastructure.
3. Set guidelines, policies and procedures for intrusion detection, intrusion prevention, resolution and remedy using a defense-in-depth strategy Daily vulnerability scans of the network and work with the appropriate teams to address and fix any issues with servers and/or workstations.
4. Monitored and daily reporting of network/internet abuse using QRadar.
5. Upgraded central firewall logging server, (FortiAnalyzer) to latest firmware and tuning the firewalls for optimal speeds and security.
6. Maintained Duo Authentication for authentication for remote access.
7. Participated in organizational technical committees on cybersecurity.

Experience

5-7 Years

Level

Executive

Education

Diploma

Description :

1. Engaged in audits of critical third party vendors to ensure security posture complied with the Firm's standards.
2. Completed security reviews of technologies, reported vulnerabilities and made recommendations to management.
3. Developed policies, guidelines and procedures for various security operations.
4. Responded to external audits by clients and was involved in remediation plans for any gaps discovered.
5. Performed Nessus vulnerability scans of critical enterprise servers and devices; reported results to management.
6. Reviewed Sourcefire IDS events and alerts for potential security breaches.
7. Performed malware analysis utilizing the Cuckoo automated malware analysis platform.
8. Analyzed the security logs of various devices and servers.
9. Utilized Trend Micro DSM for server integrity monitoring.

Experience

7-10 Years

Level

Management

Education

Bachelor's

Description :

1. Translated client strategic requirements and objectives into action plans that resulted in the development of Lifecycle Management Plans, IDS Incident Response and Alarm Escalation Plans.
2. Coordinated project plan tasking that integrated an outsourced national Intrusion Detection System, firewall, and VPN monitoring capability and combined those newly identified processes into the Managed Security Services Network Security Operations Center daily procedures.
3. Evaluated and developed comprehensive security policies (Business Continuity, Firewall Management using Managed Security Services, Disaster Recovery etc.) and procedures for Dot Coms and DOJEOUSA, and contributed to the overall knowledge and skill development of the Government Security Group.
4. Developed documentation for DOJEOUSA's National Information Assurance Certification and Accreditation Process (NIACAP) System Security Authorization Agreement (SSAA).
5. Provided third-tier analyst support and management guidance to operations personnel of client Intrusion Detection Systems during the incident determination phase of the Incident Response and Alarm Escalation procedures using product-specific analysis and reporting tools.
6. Developed a white paper and recommendations for use of ingress and egress packet filtering within a specific US Government Department's networking environment based on requirements from OMB A-130 and using RFC 2827 as a development guide.
7. Teamed with client security organization personnel to determine their specific information systems security assessment requirements and ensured that the conduct of security assessments, evaluations, and penetration testing of global network operations remain within the negotiated rules-of-engagement.
8. Performed network systems security assessments and evaluations for a large financial client in order to verify the implementation of previously reported vulnerabilities in a defense-in-depth strategy, and to determine the level of effort required by intruders to access internal network resources and potential of insider personnel to abuse user privileges.

Experience

2-5 Years

Level

Junior

Education

Bachelors

Description :

1. Responsible for the overall malware detection.
2. Engineered a full Symantec Data Loss Prevention suite to include network and endpoint detection.
3. Implemented a full disk encryption Solution using hardware encryption technology.
4. Gathered and compiled metrics used to present to senior members of IT leadership.
5. Worked on multiple security initiatives to further enhance the security posture.
6. Designed and initiated corporate Phishing tests to drive user education of malicious emails.
7. Provided education and training in security matters across all platforms.

Experience

5-7 Years

Level

Executive

Education

Associate's

Description :

1. Consistently earned the highest customer approval rating for training, Recommended including Plain Language in orientation for new employees nationwide.
2. Introduced tips for communicating effectively from the first day on the job.
3. Promoted best practices for producing publications and training modules, and documenting USCIS policies, processes, and procedures.
4. Developed and delivered Chapter 1 of the Office of Security and Integrity (OSI) Handbook within two months of OSI's startup, a Top-10 Strategic Goal.
5. Earned the Outstanding Service & Initiative Award.
6. Saw the need and established the OSI Style Guide and the OSI Glossary.
7. Proactively produced reference tools such as Better Communication Via E-mail, Foolproof Proofreading, the OSI Document Checklist, and Best Practices for OSI Document Clearance.

Experience

7-10 Years

Level

Consultant

Education

Master's

Description :

1. Conducted Vulnerability Assessment using QualysGuard to evaluate attack vectors, identified system vulnerabilities and developed remediation plans and security procedures.
2. Managed the assets in the network and creating asset groups based on OS and network devices.
3. Configured maps to identify the rogue devices in the network using Qualys.
4. Scheduled vulnerability scans and creating option profile for the devices in the Datacenter.
5. Performed infrastructure vulnerability management on corporate and PCI, SOX scoped production devices providing remediation plans and risk mitigation strategies.
6. Extracted the logs, perform real time log analysis using Q-Radar SIEM and Forensics Analysis of logs as per the request.
7. Monitored and analyzed Offenses on IBM Q-Radar Security Incident and Event Management on a regular basis and giving the result of the investigation to the remediation team to further action.
8. Created and documented reports, rules, and Dashboard in SIEM.

Experience

2-5 Years

Level

Junior

Education

Diploma