Joseph Cruz

Senior Security Analyst @Blackpoint Cyber

Directed team efforts to optimize queue management, ensuring timely and effective incident handling.• Trained and mentored analysts, supporting their growth from junior to senior roles through hands-on guidance.• Collaborated directly with customers to resolve incidents efficiently and address their security concerns.• Analyzed and resolved escalated Tier 1 alerts on MDR platform, ensuring proper remediation and threat containment.• Investigated threat actor activity, including ransomware and nation-state tactics, managing multiple major incidents monthly.• Resolved high-risk email alerts involving suspicious logins, brute-force attacks, and malicious software incidents such as SolarWinds.• Identified and remediated potential outbreaks preventing further escalation and network compromise.• Refined alert suppression and tuning processes to minimize false positives and improve detection accuracy.• Isolated compromised devices to prevent lateral movement and contain malicious activity effectively.• Conducted malware analysis using Capev2 automated sandbox, uncovering malicious behaviors and generating actionable IOCs.• Delivered tuning recommendations based on observed activity to enhance system security and reduce vulnerabilities.• Performed proactive threat hunting using IOCs and IOAs to identify compromised devices and potential security breaches.• Conducted log analysis using customer-provided data to detect and investigate security incidents.• Performed incident response activities, developed detailed IR reports, and provided actionable security recommendations.