Stoughton, Massachusetts, United States
To work in a professional structure focus environment using my knowledge and skills to achieve more as a team player.
• Lead security operations including incident response and cyber threat management. • Establish monitoring and detection mechanisms to identify potential threats, and lead or assist in responding to incidents. • Conduct vulnerability assessments, penetration testing, and remediation of security weaknesses by provided detailed reports, and implemented PowerShell-based remediations, contributing to a 100% reduction in critical, 90% in high, and 76% in medium vulnerabilities for the server team. • Automate security tasks where possible using scripting and configuration management tools. • Architect and implement security controls including firewalls, IDS/IPS, and encryption technologies. • Review applications and systems to ensure industry has the best practices and security hardening. • Ensure alignment of security strategies with compliance and regulatory standards (HIPAA, CIS, NIST). • Performed threat hunting with EDR, detecting loCs from brute force attacks, data exfiltration, and ransomware. • Designed, tested, and published advanced threat hunting scenarios for incident response tabletop exercises • Developed custom detection rules in Microsoft Defender for Endpoint to automate isolation and investigation • Reduced brute force incidents by 100% by implementing inbound NSG/firewall rules to limit Internet exposure. • Created Microsoft Sentinel dashboards to monitor logon failures and malicious traffic using threat intelligence. • Experienced with KQL (similar to SQL/SPL) which I used to query logs within the SIEM and EDR platform.
SOC Information Security Engineering level 2 at former hospital called Partners Healthcare, which is now called Mass General Brigham under The Information Security and Privacy Office, which is part of the Information Systems Department. Responsible for the design, testing, implementation and maintenance of Threat and Vulnerability Management solutions, Vulnerability weekly scanning and Website Code review. Continue to managed employee training for 10 new interns, over a period of 30 months. Offering continuous guidance and mentorship on best practices while providing constructive feedback. Duties: • Primary engineer for vulnerability scanner for inter-organizational groups to assure compliance of devices connected to the network with industry regulations and standards using security tool called Tenable/Nessus. • Second duty for scanning and assistance in remediation of vulnerabilities for critical web applications using security tool called Veracode. • Third duty for Splunk and Splunk Phantom to execute digital “Playbooks” to happen in the Service Now platform for Security Monitor and Incident responses. •Four duty is supporting and managing CyberArk Privileged Account Management System across the enterprise. Working with various groups to integrate new applications to use CyberArk as their password management solution. * Fifth duty is supporting security tool called FireEye. * Six duty threat hunting with security tool called Crowd-Strike • Participate in various projects as a member of Information Security Engineering team to ensure the effectiveness of information security governance across the enterprise. • Assist in the development and maintenance of the Partners Digital Offense Registry tracking users and equipment that are not compliant with security standards. • Deploy and maintain cloud security for AWS, GCP, Azure • Preform risk assessments of websites for vulnerable management
SOC Information Security Engineering at Partners Healthcare under the Information Security and Privacy Office, which is part of the Information Systems Department. Duties: • Primary engineer for set up scans using Tenable Nessus vulnerability scanner for inter-organizational groups to assure compliance of devices connected to the network with industry regulations and standards. • Secondary engineer for scanning and assistance in remediation of vulnerabilities for critical web applications with the Veracode platform. • Third engineer / Backup for Splunk and Splunk Phantom to execute digital “Playbooks” to happen in the Service Now platform for Security Monitor and Incident responses. • Responsible for the design, testing, implementation and maintenance of Threat and Vulnerability Management solutions •Engineer supporting and managing CyberArk Privileged Account Management System across the enterprise. Working with various groups to integrate new applications to use CyberArk as their password management solution. • Participate in various projects as a member of Information Security Engineering team to ensure the effectiveness of information security governance across the enterprise. • Assist in the development and maintenance of the Partners Digital Offense Registry tracking users and equipment that are not compliant with security standards. • Work within the AWS Cloud infrastructure to monitor and deploy services to better control vulnerability management and remediation • Within AWS use tools such as python, in conjunction with Lambda development and Cloud Formation builds to build and automate solutions within Vulnerability Management. • Responsible for the creation and implementation of an application security program to include repository scanning, static code analysis, and dynamic url scanning • Deploy and maintain AWS Inspector solution for cloud security • Preform risk assessments of websites for vulnerable management