Maxwell Owusu-Antwi

WORK HISTORY

EDUCATION

ABOUT MAXWELL OWUSU-ANTWI

Highly skilled Cyber Security Analyst, IT Specialist, and accomplished CySA+ and Security+ Certified Cybersecurity professional, currently working as a SOC Analyst in a closed SOC environment. Dedicated to optimizing security analysis by leveraging SIEM, XDR/EDR, OSINT, and email security solutions, with the aim of elevating incident detection and response protocols for comprehensive issue resolution. Proficient in seamlessly adapting to SOC-specific strategies and standard operating procedures, while staying up to date with the latest information security news and tools. An outgoing individual with an unwavering passion for technology. Proven technical knowledge backed by industry certifications, coupled with a meticulous work ethic to meet identified goals and schedules. Passionate about providing excellent service to the company, while exercising attention to details, sound technical interpersonal, and organizational judgement. Key Skills: Security Incident Monitoring and Analysis: Monitored security alerts generated by endpoint detection and response (EDR) solutions such as SentinelOne and CrowdStrike. Analyzed security events to identify indicators of compromise (IOCs) and potential security incidents. Investigated and escalated security incidents following established procedures and protocols. Vulnerability Management: Used vulnerability scanning tools (e.g, Tenable.io, Armis) to prioritize vulnerabilities. Collaborated with IT Support Analysts, System Administrators and Network Engineers for timely remediation. Firewall Management: Configured and maintained FortiGate firewall rules for network security. Monitored firewall logs for suspicious activity and unauthorized access attempts. SIEM Management: Configured and maintained SIEM (Security Information and Event Management) solutions such as IBM QRadar and Splunk. Developed correlation rules and use cases to detect security threats and anomalies. Reviewed and analyzed SIEM alerts to identify potential security incidents. Threat Intelligence Analysis: Analyzed threat intelligence from sources like IBM X-Force, Cisco Talos, and Threat Miner. Information Gathering and Analysis: Utilized OSINT (Open-Source Intelligence) tools like VirusTotal, AnyRun, Hybrid Analysis, and Joe Sandbox for malware analysis and threat research. Investigated suspicious IP addresses, URLs, and domains using tools such as AbuseIPDB, FortiGuard Labs, and URLscan. Ticketing and Documentation: Created and updated tickets in ticketing systems such as Jira and TheHive to track security incidents and their resolution.