Cyber Security Analyst

• Dec 2015 - Jul 2017

• Operates and supports security-related software and firmware (e.g. endpoint security & encryption) to maintain security and service continuity. • Monitors security sensors, application, and network data for potential information security events and information security incidents. • Develop technical and process capabilities for operationalizing new and tuning existing security solutions to ensure that only actionable data are escalated as security events.• Manage, maintain and monitor multiple security technologies, such as IDS/IPS, syslog, file integrity, vulnerability scanners monitoring/correlation systems.• Develop and maintain standard operating procedures to reflect day-to-day security operations.• Participate in intelligence sharing and trust groups, then apply this knowledge to security controls.• Assists with investigations of security events (e.g., unauthorized access, non-compliance with policies, fraud, service exploitation, etc.) to determine malfunctions, breaches, and remediation steps.• Responds to service issues, problems, and critical situations to support resolution and minimize downtime.• Generate security metrics and reports, and provide remediation actions as needed.• Demonstrating fundamental understanding of system and network security principles and technology• Knowledge of possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.• Provide technical input on threat and vulnerability risks• Provide 24x7 operational support for escalations on a rotating basis.