Olalekan Balogun

About Olalekan Balogun

Cybersecurity Analyst with 5+ years strengthening enterprise security across managed services, ISP, and technology environments. Specializes in SIEM monitoring, incident response, vulnerability management, and GRC alignment using NIST CSF, ISO 27001, and CIS Controls. Comfortable working across Azure/AWS, Windows/Linux, and M365 ecosystems; translates risk into clear actions for IT and business leaders. MBA plus (ISC)² CC, CGRC, and Security+.

Experience

1. Cyber Security Analyst

   Insight Enterprises Inc

   May 2024 — Present

   Led 24x7 detection and response across Microsoft Sentinel and Splunk, tuning analytic rules, KQL queries, and watchlists to cut false positives and reduce mean time to detect/respond; coordinated containment through Defender XDR and Sentinel playbooks.• Owned vulnerability management cadence (Tenable/Qualys) for mixed cloud/on-prem assets; prioritized CVEs with EPSS/CVSS, drove patch SLAs with infra/app owners, and tracked remediation in ServiceNow with executive metrics and aging reports.• Performed end-to-end incident handling (triage, scoping, containment, eradication, recovery, lessons learned) for phishing, business email compromise, ransomware precursors, and suspicious lateral movement using ATT & CK-aligned procedures.• Hardened identity perimeter with Conditional Access, MFA enforcement, privileged access workflows, and access reviews; partnered with IAM to reduce stale/high-risk accounts and privileged token lifetime.• Implemented email security controls (Defender for Office 365, DMARC/DKIM/SPF) and mailbox forensics (headers, Message Trace, Threat Explorer); built self-service user guidance to speed false-positive resolution.• Built cloud security guardrails in Azure: Security Center recommendations, Defender for Cloud policies, secure storage, key management, and baseline NSG/firewall rules; integrated alerts into SIEM with severity and owner routing.• Ran quarterly tabletop exercises and purple-team style detections reviews, mapping gaps to MITRE coverage and updating runbooks for high-risk scenarios (initial access, persistence, exfiltration).• Supported audits and customer assurance by mapping implemented controls to NIST CSF/800-53, ISO 27001 Annex A, CIS Controls; closed evidence requests, updated policies/standards, and tracked POA & Ms to completion.• Delivered executive dashboards translating attack trends, control maturity, and risk posture into clear actions; influenced budget for EDR expansion and privileged access tooling