Information Security Analyst Resume Fairfax, VA - Hire IT People

PROFESSIONAL EXPERIENCE

Information Security Analyst

Confidential - Fairfax, VA

Responsibilities:

Develop database for asset management of laptops, desktops, and mobile devices for all CSB sites
Coordinate annual CSB PC Replacement effort and conduct inventory assessment
Evaluate new sites for equipment needs and consult employees on how to meet business needs
Act as a point of contact between DIT and the CSB for security, equipment and mobile device needs
Resolve halpdesk tickets related to distribution lists, security groups and all other security related issues wifin a timely and efficient manner
Monitor Symantec DLP for potential PHI spills and initiated incident reporting
Analyze Credible EHR logs to identify potential malicious activity, report and investigate issues as needed
Document multiple processes for CSB regarding EHR Implementation, EHR Security and additional workflows
Provision new user accounts, employees transferring and terminated employees and monitored their access to distribution lists and security groups
Perform risk assessment for EHR system, agency data, and business processes
Serve as subject matter expert for operational, technical and management security

Security Analyst

Confidential, Herndon, VA

Responsibilities:

Monitored and analyzed traffic from Arcsight SIEM, IDS/IPS, proxy servers
Stayed up to date wif threats, APTs, and perform threat hunting wifin Arcsight
Collaborated wif team to resolve internal cybersecurity issues such as phishing emails
Used OSINT to investigate security events and give more context to log events
Utilized open source tools to investigate potentially malicious files or URLs.
Reported suspicious or abnormal activity to clients for further investigation
Generated logs to give clients more insight into security incidents
Escalated events to clients, assist them wif their investigation process and maintain communication until ticket is closed
Investigated host based and network based alerts wifin Splunk Enterprise

Helpdesk Specialist

Confidential, Bethesda, MD

Responsibilities:

Supported wide variety of scientific applications such as R, R Studio, Geneious as well as applications such as a Microsoft Office Suite
Imaged iMACs and PCs to institutional standards
Patched scientific computers wif Microsoft Updates when vulnerabilities are detected
Remediated desktops wif potential vulnerability threats wifin 48 hours of detection
Used ForeScout, Malwarebytes, Emisoft, Cylance, ClamXAV, Sophos to detect and quarantine malware
Utilized Tenable and Nessus wif security incident response team to ensure network is secure
Worked wif terminal to perform FileVault decryption and application troubleshooting
Collected forensic images and scans as part of incident response process
Diagnosed and troubleshoot application issues on MAC OSX and Windows 7, 10
Advised clients on best practices for day to day operations
Provided clients wif quick and timely solutions to computer issues
Created standard of procedures for teams and provided documentation as needed
Troubleshooted printer hardware issues as well as network issues
Assisted networking team wif patching switches in LAN closets
Completed daily tasks using Remedy force ticketing system to create, track and manage tickets
Performed firmware and software updates on scientific instruments

User Support Intern

Confidential, Richmond, VA

Responsibilities:

Remotely accessed user's computers to troubleshoot software issues, perform software installations and resolve other problems quickly and professionally.
Utilized ServiceDesk Pro to create, track, and manage service requests.
Dispatched technicians and elevated tickets as necessary
User account management in Active Directory, SAP, SCCM
Created Knowledge Base documents for end users
Instructed users on how to connect to VPN services when they are traveling
Removed hard drives and replaced them as part of imaging process
Assisted field technicians wif imaging Dell laptops and changing BIOS settings
Identified exchange server issues and escalated tickets as needed