Uploaded File
Daniel
Coastey77@Gmail.com
678-815-8043
Atlanta, GA 30301
688-818-8043
Sr. Security IAM / PAM / Analyst / Engineer
25 years experience W2
0
Recommendations
Average rating
38
Profile views
Summary

Cybersecurity professional with demonstrated accomplishment Sr. SOC Cybersecurity Analyst, evaluation of security stacks, third party API risk management, vulnerability management, and compliance. Adept at providing technical support and developing new processes through ongoing work, defect resolution and enhancement solutions. Expert in completing difficult assignments within crucial timelines.

Highly articulate, demonstrating excellent interpersonal skills. Strong management skills and methodical aptitude with an innate ability in decision-making, coordinating and synthesize data. Team lead, e-discovery and accomplished internal/external fraud investigations, and forensic analyst — enterprise implementation of security platforms for Clients’ and companies, include; Fortune 10 global companies, government agencies, EU-GDPR. Enterprise implementations are my passion.

Expertise

  • IAM/SSO/Role-base
  • IAM / AD | RACF Intergration
  • Cybersecurity
  • Risk Management
  • Vulnerability Scan
  • Penetration Testing
  • Information security tools
  • IAM Third Party Risk Assessment
  • Quality assurance

Cybersecurity Tools

  • DLP
  • FTK
  • EnCase
  • NMAP
  • Wireshark
  • Nessus
  • Kali
  • Data lost prevention
  • End point protection
  • SEIM’s
  • IAM / IDM /PAM
  • Metasploit

Implantation of Privacy Laws, Regulations

  • SOX / Gov. REGS
  • GLBA
  • PCI-DSS
  • HIPPA / HITEC
  • EU-GDPR
  • PII

Certifications

  • Certified HIPPA System Security Professional
  • MS Server 2012 certificate (MCSA)
  • Information Security Specialist (ISS)
  • STRIDE / DREAD /RASP advance network architecture applications’ review and risk analysis
  • Cisco certificate deploying switches, routers

Experience
Sr. Security IAM / PAM / Analyst / Engineer
Information Technology
Aug 2018 - Apr 2019

Team Lead the applications reconciliation process, perform analysis of user identity and access data to identify inconsistencies and inaccuracies.

  • Team lead the FSA application process from discovery-to onboarding into IAM SSO, managing the processes of provisioning and de-provisioning.
  • Perform network monitoring and capacity planning, ensure network performance meets SLAs (5%)
  • Industry research on security trends, goal of potential improvements in our own processes or tools
  • Knowledge of Palo Alto Networks products
  • Strong familiarity with security technologies in general, both at the host and network level Working knowledge of Splunk / Splunk Enterprise Security
  • Hands on all OSI Working knowledge of T1, T3, Sonet, Frame-relay, and Ethernet
  • Evaluate collected data for unmapped identities, report that information and assist in the reconciliation of inconsistencies
Enterprise Security IAM Provisioning Network Monitoring Splunk Splunk Enterprise Security
Remove Skill
Sr. Security Analysts Vulnerability Enginer
Insurance
Mar 2018 - Mar 2018
  • Investigate hundreds of employee's emails that were hacked. Reviewed over 22,000 .pdf files with patient exposing PII, PHI data
  • Coordinate DLP tools for process management and ensure that cycle guidelines adherence
  • Established anomalies of consumption and identify leaked data and took measures to resolve them and notified management
  • Selected to be the lead investigator who helped rebuild a large DLP suite of services including new rules with the DLP, and policy for employees
  • Completed a 6 weeks assignment in 3 weeks because of my in-depth knowledge of behavioral patterns.
Security Analyst
Remove Skill
Sr. Security AD/IAM/PAM / Engineer
Agriculture
Aug 2017 - Sep 2017
  • Collaborate with CIO and CISO on, application and network vulability security and implementation; including pentesting, SAST/ DAST and business team’s document application communication and authentication requirements
  • Worked independently and managed workload with the organization to meet expectations and objectives
  • Developed processes and implement tools and techniques to perform ongoing SOX 404 access security assessments of the environment
  • Open an incident response ticket for all incidents and open a service ticket for all service requests. Monitor all tickets from creation to resolution to closure
  • Diagnose and resolve technical hardware and software issues by conducting basic and tier II troubleshooting for servers, workstations, and applications within the Active Directory environment providing first call resolution to incident reports and requests for service. Escalate all issues that cannot be resolved
  • Standardize SIEM processes and procedures and provide an improvement in metrics
  • Worked on multiple projects simultaneously, setting priorities and meeting deadlines
  • Central tracking and management of enterprise application vulnerabilitiesper DREAD
  • Kept current with vulnerabilities, attacks, and countermeasures as well as devoting time to research and development activities
  • Implement GRC processes and management tools used to identify vulnerabilities and track their remediation within the environment
MS Active Directory SIEM SOX IAM SAST
Remove Skill
Security Analysts III IAM/EP/DLP Engineering Operations
Transportation
Feb 2017 - Jul 2017
  • Coordinate DLP tools for process management and ensure that cycle guideline and matrix
  • Established anomalies of consumption and identify leaked data and took measures to resolve them and notified management
  • Collaborated with GPC Cyber Security, Global Technology Infrastructure, Corporate Cyber teams, and line of Business Information Risk Management teams for issue resolution and mitigation of coding
  • Devised innovative advantages and eliminating risks of each appliactions vulabilites, as they relate to centralized and decentralized systems for IAM.
  • Defined policies for user groups, collaborated with senior leaders of the application, development and infrastructure teams, builid in security providing information security technology, network engineering, operations, threat management, and architecture advice while also coordinating with the centralized team.
Cyber Security Information Security Security Analyst IAM Risk Management
Remove Skill
Sr. Network IAM/Vulnerability/DLP/EP Security Analysts / Engineer
Consumer Goods
Mar 2016 - Dec 2016
  • Work with your peers to assist the global Security Operations Center Response Manager in defining the overall security response strategy for Amazon
  • Create reports and dashboard to provide metrics for SOC operations in a meaningful way for Sr. Management
  • Working with the Incident Response team to help create RCA's for events escalated to incident levels
  • Perform Network Security Monitoring
  • Maintaining the relationship to keep clients and management informed and throughout the incident, problem and change management cycles
  • Lead and manage the local Tier 1 Security Operations staff
  • Services monitored will include, but are not limited to SIEM, IDS/IPS, Firewall, Web Application Firewalls, Data Loss Prevention (DLP)
  • Develop and maintain server software inventories and manage application whitelisting solutions
  • Executed technical feasibility solutions for new functional designs and implement approved options for performance improvement of technical security controls
  • Chaired administration of the migration team meeting with Belgian and India counterparts
Firewall Network Security Security Analyst SIEM IAM IDS IPS SOC
Remove Skill
Sr. Manager Security Software / Role-based Application Access
Information Technology
Sep 2015 - Mar 2016
  • Application assessed the impacts and risks of changes, assigned tasks that reduce or eliminate those considerations, determined tentative implementation dates, and tracked results of the implementation.
  • Maintain knowledge of in-the-wild vulnerability exploitation techniques, assess the risk to enterprise and prioritize remediation.
  • Configured and run automated vulnerability scanning tools, prioritize remediation, and track exceptions responded to and managed the results of third-party server penetration tests API's Maintained application logs
  • Team Lead of large international teams to identify exposure, vulnerability assessment, and the root cause of systemic issues leading to the presence of vulnerabilities/hygiene issues with coding
  • Demonstrates proven thorough abilities with technical network infrastructure, including, but not limited to, Next Generation Firewalls, IDS/IPS, Proxy, operating systems (Windows/Unix) and one or more SIEM/ Security Analytics solutions (i.e Splunk ES, HPE ArcSight, IBM QRadar, LogRhythm Elastic ELK)
  • Communicating in an organized and knowledgeable manner in written and verbal formats including delivering clear requests for information, responding to such requests, and communicating potential conflicts, risks, or issues and,
  • Investigate solutions to automate server build, configuration and vulnerability patching
  • Develop and maintain server software inventories and manage application whitelisting solutions
  • Investigate, recommend security stack review and deploy virtual patching solutions
Project Management Splunk Vulnerability Assessments IDS IPS SIEM Windows API Development
Remove Skill
Sr. IT Security Analyst
Information Technology
May 2015 - Sep 2015
  • Application assessed the impacts and risks of changes, due to the braech in 2014 of Anthen assigned tasks that reduce or eliminate those considerations, determined tentative implementation dates, and tracked results of the implementation.
  • Maintain knowledge of in-the-wild vulnerability exploitation techniques, assess the risk to enterprise and prioritize remediation. Configured and run automated vulnerability scanning tools, prioritize remediation, and track exceptions responded to and managed the results of third-party server penetration tests API's Maintained application logs
  • Access control attacks: emanations, impersonation, and password cracking. Collaborated with senior leaders of the application, development and infrastructure teams, providing information security technology, network engineering, operations, threat management, and architecture advice while also coordinating with the centralized Information Risk Management team.
  • Team Lead internal cross-functional department IT initiatives and participated in cross-functional initiatives
  • Manged sprints and made determination as to non-compliance to policies and regulations.
Compliance Information Security Security Analyst Risk Management
Remove Skill
Senior IT Security Analysts Application Development
Information Technology
Jan 2014 - Apr 2015
  • Examined and evaluated computer software and hardware to uncover access attempts.
  • Assessed APT threats and developed plans to close loopholes.
  • Performed risk assessments to help create optimal prevention and management plans.
  • Demonstrates proven thorough abilities with technical network infrastructure, including, but not limited to, Next Generation Firewalls, IDS/IPS, Proxy, operating systems (Windows/ nix) and one or more SIEM/ Security Analytics solutions (i.e Splunk ES, HPE ArcSight, IBM QRadar, LogRhythm Elastic ELK)
Risk Assessment Security Analyst IDS IPS SIEM
Remove Skill
Data Centre's Security Engineer/Risk Assessments
Information Technology
Jan 2002 - Dec 2013
  • Identified and evaluated potential threats and vulnerabilities.
  • Designed training manuals to increase security awareness throughout the clients' company
  • Monitored live systems to discover real-time threats.
  • Communicating in an organized and knowledgeable manner in written and verbal formats including delivering clear requests for information, responding to such requests, and communicating potential conflicts, risks, or issues.
Risk Assessment Security Engineer
Remove Skill
Program Manager Security Analysts & Risk Assessments
Construction/Engineering
Jun 1996 - Dec 2001
  • Identified and evaluated potential external fraud and internal threats and vulnerabilities.
  • worked as the Program Manager leader to develop a web application, for pre-qualification, of sub-contractors that had ties to organized-crime activities working for the School Construction Authority (SCA), for the New York City IG’s office.
Program Management Project Management Risk Assessment Security Analyst
Remove Skill
Edit Skills
Non-cloudteam Skill
Education
Associate's in Cyber/Computer Forensics and Counterterrorism
Gwinnett Technical College, 2013 - 2017
Certifications
Certified HIPPA System Security Professional
Cisco certificate deploying switches, routers
MS Server 2012 certificate (MCSA)
Information Security Specialist (ISS)
STRIDE / DREAD /RASP advance network architecture applications’ review and risk analysis
Skills
Risk Assessment
2015
23
Security Analyst
2018
14
Project Management
2016
12
Security Engineer
2013
11
Program Management
2001
10
IAM
2019
2
IDS
2016
2
IPS
2016
2
Provisioning
2019
2
SIEM
2017
2
Splunk
2019
2
Vulnerability Assessments
2016
2
API Development
2016
1
Enterprise Security
2019
1
Network Monitoring
2019
1
Splunk Enterprise Security
2019
1
SQL
2019
1
UNIX
2019
1
Windows
2016
1
Application Development
2017
1
Cisco
0
1
Compliance
2015
1
Cyber Security
2017
1
Firewall
2016
1
GLBA
0
1
HIPAA
0
1
Information Security
2017
1
Microsoft Excel
0
1
MS Active Directory
2017
1
Network Security
2016
1
Penetration Testing
0
1
RACF
0
1
Risk Analysis
0
1
Risk Management
2017
1
Routers
0
1
SAST
2017
1
SOC
2016
1
SOX
2017
1
Switches
0
1
Vulnerability Managment
0
1