Jude Ankrah

About Jude Ankrah

Results-driven IT Security Analyst with senior-level scope in Insider Threat detection…

Experience

1. IT Security Engineer

   Thermo Fisher Scientific

   Aug 2022 — Present

   Lead 40+ insider threat escalations annually, conducting complex investigations, managing chain-of-evidence, and coordinating with external stakeholders when required, with coverage extending to 800+ monitored employees in targeted RIF and HRD projects, impacting global security operations, compliance readiness, and insider threat resilience.Serve as Subject Matter Expert and project lead for Splunk and Proofpoint ITM, driving insider threat program governance, threat hunting methodologies, and risk-based detection tuning. Direct the development of correlation searches, dashboards, and governance documentation leveraged enterprise-wide.Author the CAP Proofpoint ITM Governance Document, defining configuration hierarchy, realm and agent policy strategy, deployment methods (Intune, JAMF, Slack), rule creation standards, and integrations with Splunk, SOAR, and Slack. Define agent policy and realm mappings for 13+ realms, ensuring tailored security configurations across business units and initiatives.Engineer and maintain privileged user monitoring and data exfiltration detection across 7+ major insider threat initiatives, including USB hard/soft blocking, patient data monitoring, agent tampering detection, and exfiltration rule tuning. Optimize reusable conditions for Proofpoint ITM to enhance data classification accuracy, streamline cloud DLP integration (O365, Azure), and reduce false positives from 500+ domains.Develop and maintain dashboards to support proactive threat hunting, improve detection coverage, and enable operational reporting. Integrate Splunk with Slack automation to enable real-time alerting optimization, automated incident response, and SOC workflow automation. Onboard and mentor new analysts and cross-functional colleagues, enabling independent case handling, while driving analyst upskilling, dashboard adoption, and process maturity across the SOC.