Lawrence Bernasko

About Lawrence Bernasko

Passionate Security Operation Centre (SOC) and Incident Response Analyst with 3 -year experience investigating, containing, and preventing network, host, and email-based attacks. Proficient in malware analysis, incident response, data loss prevention, and improving SOC processes by utilizing top industry securitySplunk Core Certified UserCompTIA Security+ SY0-601 CertifiedAREAS OF EXPERTISE • Risk Management/Security Control Assessment• Vulnerability Assessment• Linux/Windows/ Active Directory• Microsoft Office 356/SharePoint/OneDrive• Splunk, Qradar, LogRhythm/ ArcSight• Wireshark/ IBM Big Fix• PCI-DSS/FIPS/NIST 800 Series• Experience with Windows, Linux operating systems and VMware and VirtualBox simulations • Knowledge of (Splunk), Python, Wireshark, Nessus, OWASP Top 10, Nmap and MITRE ATT & CK, PowerShell Script and Cloud Infrastructure• Strong knowledge of information security frameworks and standards, such NIST, PCI DSS and CIS Critical Security Controls• Ensure compliance with cyber security policies and procedures regarding documentation and assurance. • Conduct network security monitoring on services including SIEM, IDS/IPS, Firewall, Web Application Firewall and Data loss Prevention (DLP)• Develops and manages the cyber security operations center.• Used Splunk SIEM threat analyst in a managed service security operation center (SOC), triaging cyber threats utilizing Splunk and various Cloud security tools.• Responsible for following Response Playbooks/Incident Response Plans (IR Plans) used by SOC team.• Use of NIST Risk Management Framework as a basis for SOC team Cyber Security guidelines such as Continuous Monitoring.• Manage Splunk (SIEM) configuration files like inputs, props, transforms, and lookups. Upgrading the Splunk Enterprise and security patching.• SOC Team worked with NIST Compliance, Security Management and Operations, Vulnerability Assessment, Risk Management Framework, Incident Response, Monitoring, Threat Detection and Mitigation.• Technical as well in terms of Security design and support, SIEM and proxy to mention but a few.• Design and build the new infrastructure for Organization based on AWS.• Monitors, assesses, and defends the enterprise information systems.• Manages SOC and NOC dashboards, reporting, and monitoring.• Manages SIEM, CASB, and SIEM / Splunk SOC integrations.• Assist with further integrating and refining local Active Directory with cloud Active directory.• Execute SOC activities in Azure/AWS/Cloud base security environment

Experience

1. Cyber Security Analyst (Soctier 1)

   Chooseu

   Jan 2022 — Present · Woodbridge, VA, US

   Cybersecurity Analyst program, spending over 700+ hours developing knowledge and experience of real workplace simulations that mirror the exact tasks and problems encountered as a SOC Tier 1 analyst.• SOC Team worked with NIST Compliance, Security Management and Operations, Vulnerability Assessment, Risk Management Framework, Incident Response, Monitoring, Threat Detection and Mitigation.• Working in a security operations center; investigating, responding and/or triaging security events.• Technical as well in terms of Security design and support, SIEM and proxy to mention but a few.• Design and build the new infrastructure for Organization based on AWS.• Monitors, assesses, and defends the enterprise information systems.• Manages SOC and NOC dashboards, reporting, and monitoring.• Manages SIEM, CASB, and SIEM / Splunk SOC integrations.• Experience implementing security technologies, including Threat Intelligence platforms, digital forensics, intrusion detection, and network security.• Assist with Clean up state agency Active Directory user accounts.• Assist with further integrating and refining local Active Directory with cloud Active directory.• Execute SOC activities in Azure/AWS/Cloud base security environment• Develops and manages the cyber security operations center.• Used Splunk SIEM threat analyst in a managed service security operation center (SOC), triaging cyber threats utilizing Splunk and various Cloud security tools.• Responsible for following Response Playbooks/Incident Response Plans (IR Plans) used by SOC team.• Use of NIST Risk Management Framework as a basis for SOC team Cyber Security guidelines such as Continuous Monitoring

Education

• University of Education, Winneba, Ghana

  Bachelor of Science , Information Technology

• University of Education, Winneba Ghana.

  Bachelor's degree, Information Technology

• The Ghana-India Kofi Annan centre of Excellence in ICT (AITI-KACE)

  Cybersecurity Attacks & Preventive Techniques

• ChooseU

  Cybersecurity Analyst