Fradley Joseph

About Fradley Joseph

As a cybersecurity professional with a strong technical foundation and hands-on experience, I focus on defending digital environments, optimizing security operations, and staying ahead of emerging threats. Nearing completion of my B.S. in Cybersecurity at Western Governors University (June 2024), I draw on industry best practices, academic rigor, and real-world problem-solving to deliver comprehensive security solutions.My background spans both frontline and back-end defense. As a Desktop Engineer at Teleperformance, I support incident response efforts, manage remote and on-site systems, and ensure compliance with security policies. I’m adept at provisioning desktops via MDT, managing devices through Intune and Azure, and leveraging Group Policy for strict audit and governance standards.I work with a range of tools and frameworks: Splunk for SIEM, Kali Linux for penetration testing, Wireshark for packet analysis, and Nmap for port scanning. I’m well-versed in NIST SP 800, OWASP Top 10, ISO 27001, as well as MITRE ATT & CK, SOAR, the Cyber Kill Chain, and GDPR. My certifications—SSCP, CySA+, PenTest+, Network+, Security+, and ITIL Foundation—demonstrate a commitment to continuous learning and professional development.Outside the workplace, I’ve honed my detection and response skills through hands-on labs and personal projects. Splunk Boss of the SOC challenges sharpened my threat hunting and intel integration capabilities, while my home labs with VirtualBox, Kali Linux, and Splunk let me simulate attacks, analyze malicious activity, and understand attacker TTPs. Developing the PeepingTom Python-based scanner deepened my grasp of networking protocols and traffic analysis.My experience with Blue Team Labs Online’s \"Vortex\" scenario further refined my ability to analyze PCAPs, uncover compromised credentials, and dissect SMTP traffic. These immersive challenges have strengthened my understanding of IOCs, streamlined my response workflows, and reinforced my proactive approach to securing critical systems.I remain dedicated to evolving as a security professional—combining strategic thinking, analytical rigor, and a passion for cybersecurity. I look forward to applying my skills, adaptability, and commitment to continuous improvement in environments that value innovation, resilience, and the relentless pursuit of security excellence.

Experience

1. Greymatter Specialist

   ReliaQuest

   Mar 2025 — Present

   Led incident response from triage to containment across ransomware, command-and-control callbacks, MFA fatigue takeovers, and lateral movement (PSEXEC/Impacket, abnormal domain replication)- Engineered and tuned high-fidelity detections for Windows/macOS/Linux and cloud—persistence, living-off-the-land binaries, encoded PowerShell, scheduled tasks, Kerberoasting, pass-the-hash, and suspicious user agents—raising precision and reducing noise- Ran deep investigations and hunts on compromised accounts, insider risk, device code token theft, and executive-targeted phishing by correlating SIEM, EDR, identity, and UEBA to confirm scope and drive remediation- Built and stabilized data/connector pipelines with Bindplane and GreyMatter across Splunk, QRadar, Chronicle, and Microsoft Sentinel; fixed API outages, credential expirations, ingestion failures, zero-event conditions, and disk pressure; authored runbooks- Drove cloud security response in AWS, Azure/Entra ID, Office 365, and Google Workspace, addressing S3 exfil attempts, unauthorized API actions, permissive policies, OAuth anomalies, impossible travel, and external forwarding; tuned Wiz and Orca alerts- Orchestrated customer engagements—incident bridges, threat-hunt scoping, stakeholder briefings—turning findings into action, including phishing-wave containment, password-reset playbooks, and outage advisories- Managed a diverse security stack end-to-end: CrowdStrike (incl. Identity), SentinelOne, Cortex XDR, Microsoft Defender XDR/Identity/O365, Proofpoint, Okta/Entra ID, Netskope, Darktrace, Tripwire, and multiple SIEMs; triaged, tuned, and coordinated containment- Maintained SIEM health and governance by monitoring search/storage and log-source reliability; responded to CVE-driven detections and hardened policies.

Education

• International Baccalaureate

  International Baccalaureate

• University of Central Florida

  Computer Science

• Western Governors University

  Bachelor of Science - BS, Cybersecurity & Information Assurance

• Suncoast Community High School

  2020, International Baccalaureate