Information Security Analyst Resume

SUMMARY:

cyber security professional, with more than 10 years of professional work experience in the Information Technology Security industry. He is a resourceful, skilled individual that excels in dynamic and challenging environments.

AREAS OF EXPERTISE:

Splunk

Sourcefire

McAfee ePO

Checkpoint

EnCase

SIEM McAfee

IronPort

Symantec Discovery Accelerator

Akamai

McAfee DLP

FireEye (Email Threat Prevention)

Archer

McAfee Web Gateway

SANS SIFT Incident response KIT

Service now

RSA NetWitness

Sysinternals Suite

JIRA

Websense Web Filtering

Various open source SANS DIFR tools

PROFESSIONAL EXPERIENCE:

Confidential

Information Security Analyst

Participates in 24x7x365 coverage for intrusion monitoring, incident response, infrastructure maintenance, and user administration.
Monitors and responds to network intrusion and vulnerability alerts raised by automated detection systems, internal and external reports, and manual investigation.
Executes incident response procedures and Chief Security Office (CSO) processes to identify computer security incidents, contains intrusions and recommends options for eradication and recovery all the while effectively communicating with both internal and external customers and escalating as necessary.
Investigates incident root cause and scope using host and network based forensics when called for by the incident response plan.
Assists Service Desk and Technical Operations Center (TOC) personnel technically and procedurally with incident handling and security concerns.
Deters, identifies, monitors, and investigates computer and network intrusions.
Actively profiles network traffic to detect patterns indicating possible intrusions from inside or outside corporate networks.
Working knowledge of TCP/IP, networking design, and routing architectures.

Confidential

Technical Support/Customer Engineer

Performed installation, maintenance, and on - site repair on POS (IBM, HP, DELL etc.) technologies.
Performed Tier II support of products and services of high complexity including large servers, main frames, peripherals, large system printers, plotters, enterprise level servers, and item processing reader/sorters.
Performed Tier II support of networks and software issues including: imaging systems, networking communications equipment, network and systems management protocols, hardware, installation, management, multi-vendor maintenance, and software support.
Performed on-site support for Cisco switches and routers up to the customer demarcation point.