Maryam S.

About Maryam S.

I have proven track record in compliance auditing and policy development, actively contributing to ISO 27001 audit processes, and ensuring adherence to established cybersecurity standards and best practices. My technical proficiency extends to a broad spectrum of security technologies and platforms including Microsoft Azure, Defender, Sentinel, Zscaler, Splunk, and various intrusion detection systems.As an effective communicator and team leader, I excel in collaborating with cross-functional teams and stakeholders to ensure that security and compliance objectives are achieved. My ability to educate and train teams on cybersecurity awareness and best practices further enhances the overall security framework of the organizations I work with. Experience in SOC team delivery using security analysis, investigations, reporting, Mitigation, tuning,Managing aspects of the Vulnerability Risk Management including vulnerability identification, analysis, and remediation coordination and reporting along with the strong understanding of legal / regulatory requirements such as PCI-DSS, HIPAA, NIST, ISO27001, FISMA.Cloud Security Assessments and Controls Implementation (AWS and Azure)

Experience

1. Staff Security Engineer

   DISH TV

   Jan 2024 — Present · Englewood, CO, US

   Developed and established a robust system for DLP log monitoring and SIEM data coverage, significantly enhancing incident detection and response times.Conducted comprehensive risk assessments and implemented mitigation strategies, reducing the overall risk profile by 40%.Created and utilized KPIs and KRIs to measure and improve DLP initiatives, providing actionable insights to senior management.Successfully integrated Web DLP solutions with Secure Web Gateways (SWGs), streamlining data protection across all web access points.Reduced data loss incidents by 30% through the implementation of DLP and classification rules using Microsoft Purview.Conducted threat hunting and advanced security measures like micro-segmentation and encryption, fortifying financial data protection.Configured CASB settings and deployed endpoint DLP solutions, decreasing data leakage incidents by 30%.Monitored and detected security incidents using ArcSight (SIEM) and conducted continuous cloud environment monitoring to mitigate threats.Maintained compliance with GDPR, HIPAA, SOC 2, and other regulations, ensuring alignment with industry standards.Generated detailed compliance reports and conducted audits to enforce Email DLP policies. Tools and Technologies: Microsoft Purview, Symantec DLP, Forcepoint DLP, McAfee Total Protection for DLP, Splunk, IBM QRadar, ArcSight, Google Cloud Security Command Center, AWS Security Hub, Microsoft Defender, Zscaler, Cisco Umbrella, Netskope, McAfee Vision Cloud, CrowdStrike Falcon, RSA Archer, Metric Stream, Jira, Elastic Security, Sumo Logic, VMware NSX, Vormetric, Tableau, Looker, Confluence, SharePoint.

Education

• University of Maryland Global Campus

  Master's degree, Cybersecurity Management and Policy