• Personally audited the accounts of departing employees’ prior to their resignation to ensure there were no unlawful downloads and leakage of confidential information
• Analyzed each dashboard in the SIEM and Carbon Black to evaluate the potential risk of each event
• Conducted investigations of any suspicious or potentially suspicious activities found in the SIEM and document findings in Jira
• Reported findings and escalated issues in a timely manner to the Director of Security Operations
• Identified vulnerabilities in the network via the SIEM; downloaded vulnerability reports and investigated the machine/user in question via IP address; reported vulnerabilities and details to IT by creating Jira tickets; followed up with IT until the vulnerability is remediated
• Monitored log-ins and activity for every company domain on Google
• Monitored potential malware in the system through Carbon Black
• Assigned, created, labeled, investigated, followed-up, and closed tickets in Jira as they are submitted; created tickets when documentation and visibility within the team was needed
• Was responsible for codifying official company security policies, e.g. authored on and off-boarding policy
• Authored runbook and knowledge base articles to propagate security team Confluence page
