David Shen

About David Shen

I want to pursue a technical career track in the Cybersecurity industry that will…

Experience

1. Cyber Security Analyst Ii

   Texas Higher Education Coordinating Board

   May 2022 — Present

   Established and administrated several new locally and Azure Cloud hosted cybersecurity infrastructure tools including intrusion prevention system (IPS), security information and event management (SIEM), vulnerability scanners (Qualys and Tenable), and Microsoft conditional access policies to follow zero trust principles. • Team lead for security participating in SecDevOps process to migrate over 35 critical apps into Azure cloud. • Independently migrated all cloud log sources and added new log sources from locally hosted tools from Microsoft Sentinel SIEM to IBM QRadar SIEM for cost savings. • Responsible for completing penetration tests within compressed timelines for apps before deployment to production in Azure cloud. Responsible for conducting vulnerability scans and working directly with teams on remediation for over 220 locally and cloud hosted assets, eliminating over 800 total vulnerabilities in first year. • Revamped monthly email phishing simulations using Sophos tool for email security leading to 34% less clicks on phishing links. • Presented phishing training course to whole agency including a live demonstration showing ease of setting up an online fake login page that captured entered credentials, creating a phishing email using Social Engineering Toolkit and sending the email using a spoofed email account using anonymous email. • Developed an interactive custom risk calculator based on various components to determine accurate risk rating for apps. • Authored all modern security policy and procedures to follow zero trust principles.

Education

• The University of Texas at Dallas

  Electrical Engineering, Electrical and Electronics Engineering

  2010 — 2014