Jason M.

About Jason M.

Experienced Cyber Security Consultant with deep expertise in endpoint detection and response (EDR), incident response, and security operations. Proficient in managing SIEM solutions, vulnerability scanning, and automation of security alerts and monitoring.Strong experience in analyzing security logs, performing root cause analysis, and developing data loss prevention (DLP) strategies. Skilled in cloud security using Microsoft Defender for Cloud in Azure. Adept at correlating security events and optimizing workflows for improved incident detection and mitigation.Certified in CompTIA Security+ with a focus on endpoint security, incident response, and threat management.

Experience

1. Cyber Security Analyst

   Withum

   Feb 2023 — Present · Whippany, NJ, US

   Deployed Microsoft security suite (Sentinel, Defender for Cloud, EntraID) across 1,100+ endpoints while maintaining PIM- Led application and infrastructure vulnerability assessments for dependencies, plugins, and third-party applications, ensuring compliance with SOC 2, NIST, and CIS- Utilized Snyk, Tenable, SOCradar, and Defender for Cloud to detect, validate, and coordinate remediation of vulnerabilities- Partnered with MSSP vendors to validate findings, remove false positives, and track remediation through closure- Supported remediation of high CVSS scoring vulnerabilities by collaborating with developers and IT teams- Built dashboards and reporting (KQL, Power BI, Sentinel) to communicate risk posture to executives and stakeholders- Designed and enforced firewall rulesets aligned to least privilege and analyzed logs to detect anomalous traffic and policy violations- Performed SOC Level 1/2 triaging with EDR and SIEM tools (Sentinel, Splunk, Datto); served as primary incident contact for phishing and application compromises- Conducted forensic analysis with Intella, Axiom, Cellebrite, and Oxygen to investigate cyberfraud, insider threats, and financial theft- Led end-to-end ransomware and business email compromise investigations, performing forensic acquisition, scope validation, root cause analysis, and executive-level reporting- Automated vulnerability and incident response workflows using Python, PowerShell, and JavaScript, reducing response times by 40%- Authored playbooks, process documentation, and incident reports to standardize SOC and vulnerability management workflows- Trained and mentored junior analysts in SOC fundamentals, log analysis, and incident documentation to strengthen response capability.

Education

• Rutgers University–New Brunswick

  Bachelor of Arts - BA, Psychology