In this role my responsibilities and experience gained include: Managing endpoint protection deployment, updates, and alerts (Malwarebytes, Cisco ASA Firewalls), Vulnerability scanning, mitigation, and remediation (Digital Defense Incorporated-Frontline Defense-both internal and external scans with annual penetration tests), Managing a SIEM and monitoring activity and logs through multiple tools. (Alienvault, Cisco Umbrella, Graylog, Azure Log Analytics, Procmon), Reviewing user accounts exhibiting indicators of compromise as well as annual access level reviews (Azure Security Center, Office 365 Security and Compliance, Azure AD) Ticketing System, Workflow, Knowledge base, and Change Management Process (Fresh Service, SharePoint, documentation of troubleshooting steps taken and resolution of issue) Policy review, updating, and creation. Maturity reports. Compliance reviews for information types, handing, access, and storage. (NIST framework, FERPA, PCI, HIPAA, PII compliance) Aside from the responsibilities and experience listed above I also created the current cybersecurity training used for employees. I handle the enrollment of employees and the grade review.
