Work Experience
L2 SOC Analyst - Shift Lead - Insight · Full-time
Nov 2022 - Present · 1 yr 5 mos
INSIGHT L2 SOC ANALYST Monitor multiple nationwide and international client networks to respond to security incidents looking for anomalies. Research ongoing security vulnerabilities and current Affairs within the security community. Design, upgrade, and build KQL queries used in Azure Sentinel to hunt for malicious activities within client networks. Use KQL to further investigate incidents and provide additional details by pivoting with IOC's in Sentinel incidents Preformed independent threat hunting via KQL in client environments looking for malicious activities outside of normal Sentinel incidents. Maintain HTML/JavaScript front end and python/PHP back end website used to help Analyst investigations and ticket creation. Train new SOC Analysts in the Standard Operating procedures and provide support for the other analysts as shift lead. Run weekly meetings for night shift analysts on the current affairs, ongoing company policy changes, and answer questions about security incidents. Working within defined SLA's to provide quick and accurate resolution while escalating to engineers when required.
Technology experience:
- Monitoring - Azure Sentinel, Secureworks XDR
- Ticketing - ServiceNow
- Programming - KQL, Python, HTML, PHP, JavaScript
- Security - Azure Defender
- collaboration - Cisco Finesse, Cisco Jabber
- Other - Paloalto Globalprotect, Teams, Slack, Outlook
![insight](insight_logo.jpeg)
INSIGHT SOC ANALYST Monitor multiple nationwide and international client networks to respond to security incidents looking for anomalies. Research ongoing security vulnerabilities and current Affairs within the security community. Design, upgrade, and build KQL queries used in Azure Sentinel to hunt for malicious activities within client networks. Use KQL to further investigate incidents and provide additional details by pivoting with IOC's in Sentinel incidents Preformed independent threat hunting via KQL in client environments looking for malicious activities outside of normal Sentinel incidents. Designed, upgraded, and built HTML/JavaScript front end and python/PHP back end website used to help Analyst investigations and ticket creation. Train new SOC Analysts in the Standard Operating procedures and provide support for the other analysts. Working within defined SLA's to provide quick and accurate resolution while escalating to engineers when required.
Technology experience:
- Monitoring - Azure Sentinel, Secureworks XDR
- Ticketing - ServiceNow
- Programming - KQL, Python, HTML, PHP, JavaScript
- Security - Azure Defender
- collaboration - Cisco Finesse, Cisco Jabber
- Other - Paloalto Globalprotect, Teams, Slack, Outlook
SOC Analyst
Nov 2020 - Nov 2022 · 2 yrs 1 mo
INSIGHT MANAGED SERVICES TECHNICIAN Monitoring multiple nationwide and international networks. Provide troubleshooting for client site connectivity, data center servers and voice communications. Troubleshooting Cisco routers, switches, Meraki access points, and ASA firewalls for layer two network connections issues over MPLS/DMVPN/etc. Monitoring Layer 3 IP protocols such as BGP, EIGRP, OSPF, HSRP, IP SLA. Troubleshooting Red Hat Linux and Windows Server 2008/2012/2016 server issues in large datacenter enviorments. Troubleshooting Collaborations voice environments with CUCM, Cisco Unity, Voice gateways/CUBE's, PG-RG disconnects. Working within defined SLA's to provide quick and accurate resolution while escalating to engineers when required.
Technology experience:
- Monitoring - Spectrum, Zenoss, Nimsoft, Science Logic, Splunk
- Ticketing - Remedy, ServiceNow
- Console - PuTTY, SecureCRT, RDP
- Networking - Cisco, Juniper, Extremenetworks, Aruba
- Servers - windows server 2008/2012/2016, Red Hat Enterprise Linux
- Security - Cisco ASA, Pala Alto
- collaboration - Cisco CUCM, Cisco unified serviceability, etc
- Other - Cisco Anyconnect, WebEx, Skype, Teams, Slack, Outlook
Managed Services Technician
Mar 2018 - Nov 2020 · 2 yrs 9 mos
Hosting Sales and Support Consultant - GoDaddy · Full-time
Apr 2017 - Jan 2018 · 10 mos
Provide excellent Customer Phone Service by following call flow and provide basic troubleshooting needs to confirm hosting functionality(Cpanel/Plesk), then escalating when required. consult with customers towards business needs and provide opportunities for small businesses advancement.
![godaddy](godaddy_logo.jpeg)
Door Greeter - Sam's Club · Part-time
May 2014 - Apr 2017 · 3 yrs
Associate of the Month - January 2016 Greet members and provide quality customer service, check receipts and baskets for errors, work in coordination with coworkers to provide satisfactory customer experience.
![sams_club](sams_club_logo.jpeg)
Certifications
Certified in Cybersecurity(ISC2 CC) - 1705400
Oct 2023 - Oct 2026
b1115725-019f-4e6b-953c-51c44867c738Secureworks XDR Certified Analyst - 0000048585
Apr 2022 - Mar 2024
Cisco Certified Network Associate(CCNA) - CNF58Q4NKLB4QQ3T
Jan 2020 - Aug 2026
9ad37948-baae-4a15-ac2e-717f35d69b63Volunteering
IT Pro DayIT Pro Day - CompTIA
Dec 2016 · 1 mo
ITIL for the Front Line IT Professional. Cloud vs. Enterprise: Impact of Today's Approachs.
Server Administration - AZCWR
Jan 2015 - Dec 2015 · 1 yr
Helped support server administration for Arizona Cyber Warfare Range by setting up the base operating system for virtual machines.
![azcwr](azcwr-400w.jpeg)