We provide IT Staff Augmentation Services!

Information Security Analyst Resume

2.00/5 (Submit Your Rating)

Plano, TX

SUMMARY

  • Creative and experienced information security professional with 8 years of experience across diverse industries. Proven ability to combine vision, ingenuity, and technical capabilities with well - developed project management and leadership qualities to support organization cyber security.

AREAS OF EXPERTISE

  • Security Assessments
  • Application Security
  • Cloud Security
  • Social Engineering
  • Policies Development
  • Threat Management
  • SIEM
  • Risk and Compliance Management
  • Incident Response
  • Vulnerability Assessments
  • Penetration Tests
  • Source Code Review

TECHNICAL SKILLS

Operating Systems: Windows Desktop and Server, Kali Linux, Ubuntu, Parrot OS, WIFISlax

Programming Languages: C, C++, Java

Scripting Languages: Java script, Perl, PHP, Python, Bash, Power Shell

Data Analytics: R, Python Pandas, Weka, Tableau

Networking: TCP/IP, IEEE 802.11, Wireless, Cisco Routing & Switching, IoT Protocols

Databases: My SQL, MS SQL, Mongo DB, Dynamo DB

DAST Tools: Veracode, Burpsuit, OWASP ZAP and Netsparker, IBM App Scan

SAST Tools: IBM AppScan Source, CheckmarxCxSAST, HP Fortify and SonarQube

Network Scanners: Nessus, Open Vas, Metasploit, Armitage, Nexpose, Qualys Guard, Accunetix

Penetration Testing Tools: NMAP, WIFI Phisher, AirCrack-ng, SQLMAP, PowerSploit, BeEF, Impacket, THC- Hydra, OllyDBG, Immunity Debugger, Mona py, Social Engineering Tool Kit, w3af, wireshark, TCPDump Syslog-ng, rsyslog, OWASP ZAP, multiple opensource tools

Version Control System: Git, SVN

CI/CD tools: Ansible, Bamboo, Chef, Puppet, Jenkins, AWS CodeDeploy, CodePipeline and CloudFormation and GIT lab

Cloud Computing: Amazon Web Services (AWS)

Audit Standards: PCI DSS, SSAE-16, NIST, HIPAA, HITRUST, ISO -27001 and 27002

PROFESSIONAL EXPERIENCE

Confidential, Plano, TX

Information Security Analyst

Responsibilities:

  • Conducted Information Security awareness training and email phishing campaign to promote security practices for Health Care client (4000+ employees).Participated in collaborative projects with Data Mangement, Networking, Cloud Security and Development teams regarding patch management, vulnerability remediation and application source code review.
  • Developed IT operational policies, processes, methodologies applicable to organizational security, management and complaince. Collaborative work with multiple teams to answer HIPAA compliance audit questionnaire for Heath Care Client.
  • Developing inhouse Vulnerability Assessment plans, Penetration Testing methodologies and automation tools to achieve DevSecOps using python programming language and DevOps concepts.

Confidential

Senior Associate Security Consultant

Responsibilities:

  • Designed and implemented vulnerability assessments and penetration testing for multiple clients in Western New York region to achieve SOX, ISO 27000, PCI and HIPAA Compliance.
  • Conducted Web Application Scanning for multiples clients internal and external web applications, developed road maps and remediation plans following OWASP Top-10 vulnerabilities and SANS Top-25 Vulnerabilities
  • Configured and Integrated SIEM into existing enterprise logging solutions and developing dashboards.
  • Designed and deployed multiple security applications using AWS stack (Including EC2, Route53, S3, RDS, Dynamo DB, SNS, SQS, IAM) focused to run penetration testing on Cloud Infrastructure.
  • Developed organization security awareness programs for social engineering and conducted email phishing campaigns.
  • Designed, developed and implemented several IT security policies and procedures for multiple clients.

Confidential

IT Security Intern

Responsibilities:

  • Configured and integrated multiple SAST and DAST tools with DevOps infrastructure for secure code reviewing and vulnerability assessment.
  • Worked onSumologic, Splunk and multiple SIEM tools for internal and external network log monitoring, auditing and analysis.
  • Conducted periodic penetration tests on cloud, network and web applications.

Confidential, TX

Research Assistant

Responsibilities:

  • Worked on “IoT Security Analytics: DDoS Detection using Machine Learning” project with DPSL lab, TAMUC.
  • Collaborated research with Trojan Hardware Research Team on Anomaly Detection Project, University of Alabama, Birmingham.
  • Designed and Implemented 'Cyber Security and Project Management in STEM education' independent study course curriculum for Master’s and Bachelor’s degree graduates.
  • Led TAMUC cyber security team for various collegiate and national level CTF's and Hackathons.
  • Participated in Confidential &M University System 12th Annual Pathways Student Research Symposium and Annual Research Symposium, 2016, Presented Poster on Security Analytics to Detect DoS and DDoS Attacks.
  • Participated in Inclass Kaggle competition, to predict League of Legends winner and stood first with 63.65% accuracy.

We'd love your feedback!