Information Security Analyst
I work across incident response, threat detection, and compliance, from leading SOC war rooms to engineering SOAR playbooks and owning PCI DSS v4.0 compliance programs. I also build internal tools that help security teams work faster, turning manual processes into clear, audit-ready workflows.
Featured work
All projects →SecOps Account Lockout & Enable Portal
A self-service tool for SecOps analysts to lock out or re-enable a compromised account in one guided workflow, backed by live Microsoft Graph calls.
View case study →
Security Alert Triage Dashboard
Pulled scattered Jira security alerts into one glanceable, filterable triage view.
View case study →
Core Expertise
Identity & Access
- Entra ID
- ADManager
- UKG
Email & Endpoint Security
- Mimecast
- CrowdStrike Falcon
- Cisco AMP
- KnowBe4
DLP & Data Governance
- Incydr (Code42)
- Varonis
- Microsoft Purview
Network Security
- Cato Networks
- Meraki
SIEM / XDR & Threat Analysis
- Taegis XDR
- Microsoft Sentinel (KQL)
- Datadog
- ANY.RUN
Vulnerability & Compliance
- Qualys
- PCI DSS v4.0
- Upguard
Linux Administration
- Kali
- Ubuntu
- SSH
Professional Experience
Information Security Analyst
Aug 2024 – Present- Rebuilt impossible-travel and geolocation detection logic, replacing a single global baseline with per-user-group expected sign-in locations; eliminated recurring false positives from offshore contractor populations while preserving alerting on anomalous corporate account access.
- Engineer SOAR playbooks and develop new detection use cases to reduce MTTR and streamline triage across the SOC's detection stack.
- Built an internal investigation tool in Python that queries Incydr, Mimecast, Varonis, and Entra ID in parallel to assemble a single behavioral view of a user under investigation.
- Build Python and PowerShell automation against the Microsoft Graph API for account containment workflows, with per-step verification and ordered rollback on failure.
- Audited vulnerability management scope after identifying stale asset inventory; corrected coverage where scans were completing cleanly against outdated target lists.
- Led company-wide rollout of endpoint isolation controls and a SCIM provisioning migration to Entra ID.
- Own PCI DSS v4.0 compliance across two consecutive assessment cycles, developing and maintaining security policies, procedures, and standards, and gathering control evidence; currently evaluating ISO 27001 as the next target.
- Led revision of the organization's BCP and DR plan, refreshing outdated documentation and presenting updates to leadership.
- Investigate insider-threat and data-handling cases via Incydr DLP, from initial detection through resolution, including substantiated cases with disciplinary outcomes; implement preventive controls such as restricting GenAI tool access to authenticated business accounts only.
- Design and deploy Mimecast policies covering executive impersonation, QR-code phishing, and ACH/payment fraud.
- Sole administrator of KnowBe4 across a 700+ employee organization, cutting organizational phishing risk score by roughly 80% (from 51 to 10) through targeted campaign design and remedial training.
- Lead incident war rooms and deliver executive-level briefings for active security incidents, coordinating across SecOps, SysOps, and DevOps.
- Implement, configure, and maintain enterprise security tools including CrowdStrike Falcon, Varonis, Mimecast, Taegis XDR/VDR, Cato Platform, Cato Firewalls, Cato EPP, Cisco AMP, and Cisco Umbrella.
- Monitor SLA adherence for vulnerability remediation, escalating missed critical/high-priority tickets; onboard new security hires.
Cybersecurity Intern
May 2024 – Aug 2024- Rotated across identity administration, endpoint security, and SIEM monitoring.
- Assisted with the security ticketing queue, documenting incoming requests to support team response times.
Supervisor, Customer Service Representative (CSR)
Nov 2022 – May 2024- Supervised and scheduled a team of CSRs, coordinating shift coverage and daily task assignments.
- Trained and onboarded new CSR hires on front-desk procedures, lane operations, and customer service standards.
- Served as the primary point of escalation for customer issues, resolving complaints and service disruptions in real time.
- Coordinated with party/event staff and back-of-house technicians to ensure sufficient coverage during high-volume periods (weekends, group bookings).
- Monitored day-to-day operations to ensure tasks were completed to standard across the shift, stepping in directly when staffing was short.
Customer Service Representative (CSR)
Mar 2021 – Nov 2022- Provided front-of-house customer service, including shoe fitting/exchange and lane assignment for guests.
- Assisted with party and event setup for group bookings, coordinating logistics (table setup, guest flow, beverage service) alongside event staff to ensure smooth execution.
- Supported behind-the-scenes lane operations, assisting technicians during equipment issues or staffing shortages.
- Maintained kitchen and front-of-house inventory through regular restocking to support daily operations.
Digital Forensics Assistant (Volunteer)
2020 – 2023- Performed forensic imaging using FTK Imager and Autopsy; handled evidence labeling and asset management system entry following chain-of-custody procedures.
- Conducted secure drive wiping using Falcon Neo; performed data de-duplication, normalization, and CRM data management.