Security Analyst

• Sep 2019 - Present

Information Security Analyst II

• May 2017 - May 2019

- Quickly identified, mitigated, and escalated high priority security incidents from a global SOC - Responded immediately to potentially globally impacting critical events - Provided high standard customer service and satisfied strict SLAs (5-15 minutes) - Analyzed and mitigated major DDoS attacks against varied client environments using Arbor - Maintained escalation procedures for clients and advised internal users on appropriate actions - Monitored multiple SIEM, NIDPS, and proprietary log aggregation tools simultaneously - Communicated with clients on behalf of engineers and documented updates in tickets - Manned phone queue for security incidents and performed handoff for rollover calls

Senior Program Analyst

• Aug 2016 - Mar 2017

- Facilitated operations of Managed Critical Asset Protection Services across the SOC- Developed automated reporting template which reduced monthly workload by approximately 450 hours- Created first Data Loss Prevention reports for UK group to better serve EMEA clients- Acted as escalation point for SOC Analysts and performed trend analysis on customer data- Built out Confluence workspaces for Analysts and Team Leaders and established workflows for tracking and documentation of collaboration in the SOC- Performed changes in test and production environments based on client and internal change processes- Developed custom detection logic for sensitive information by enhancing default policies or creating new ones- Created comprehensive detection policy for Philippine National Identifiers

Cyber Security Analyst

• Mar 2015 - Aug 2016

- Provided Managed Critical Asset Protection Services to a portfolio of 8 clients with unique security needs- Performed incident investigation, escalation, and on-call services with the goal of preventing data loss- Configured security alerts based on data sensitivity and magnitude- Traveled to client sites to discuss program accomplishments, current state, and future goals- Trained new Analysts and Team Leaders in daily operations and service delivery- Triaged security incidents in DLP and SIEM systems across healthcare, finance, legal, and logistics industries- Identified a subtle, highly targeted email phishing campaign which led to company-wide notices and training for a major client- Created dozens of write-ups detailing specific security incidents and how our services prevented data loss

Information Security Analyst

• Jul 2013 - Jul 2014

- Worked with Network, and Help Desk teams to maintain compliance and internal IT governance and controls - Performed Quality Assurance for all IT changes via peer review and change management workflows - Managed QRadar system from setup of the appliance and log sources to customized reporting, event properties, and incident management - Oversaw Security Awareness training efforts including employee compliance tracking and account credentialing - Worked with Network, and Help Desk teams to maintain compliance and internal IT governance and controls - Performed Quality Assurance for all IT changes via peer review and change management workflows - Managed QRadar system from setup of the appliance and log sources to customized reporting, event properties, and incident management - Oversaw Security Awareness training efforts including employee compliance tracking and account credentialing

Computer Technician

• Jan 2012 - May 2013

Provided campus-wide hardware and software support from an IT help desk Provided campus-wide hardware and software support from an IT help desk