Roland Tewom
Soc Analyst (Remote) @Infosys Consulting
Signup · Get unlimited contacts
WORK HISTORY
Soc Analyst (Remote) @Infosys Consulting
MD, US
Provide 24/7/365 real-time monitoring of security tools, dashboards, and email alerts.• Provide continuous monitoring of Security defenses and functions for the client.• Provide triage analysis and initial preventive response in significant incidents including basic response analysis, quarantine and escalation.• Determine and discard false positive alerts.• Analyze, investigate and process Malicious/Phishing Email alerts from IronPort and FireEye following standard operation procedure.• Use Splunk Enterprise Security (ES) to monitor and analyze network traffic, Intrusion Detection, Systems (IDS) and security events logs.• Use Cisco Sourcefire to monitor network traffic to ensure malicious network traffic is dropped.• Perform incident response to investigate and resolve computer security incidents.• Provide incident data gathering, quality control and validation of required data via tickets.• Correlate data analysis from different sources for escalation or validation.• Prepare and maintain SOPs for triage and escalation of most common types of incidents. • Escalate cyber security incidents to Tier 2/CSIRT for further analysis.• Escalate cyber privacy incidents to the Privacy Team.• Detect and track critical and high vulnerabilities and verifies and validates remediation. • Provides a daily cyber security awareness briefing for Security and Operation teams. • Process Web Site Review Requests using McAfee Web Gateway GUI to grant temporal Web Access to internal users within the Company to websites that are being blocked for security.• Block malicious domains, Hashes, Files and IPs following company\'s Standard Operating Procedures.• Lead, perform, review or track security incident investigations to resolution.• Use McAfee DLP Manager to protect intellectual property and ensure compliance by safeguarding sensitive data.
EDUCATION
Hagerstown Community College
CompTia Security + , Scrum Master Accredited Certification, AWS Certified Developer Associates , Advance Network Security, Cybersecurity,
University of Buea
Bachelor's degree, Computer Technology/Computer Systems E
ABOUT ROLAND TEWOM
Experienced SOC and DLP analyst with over 6+ years of experience in the field of Cyber Securities.• Excellent problem-solving and analytical skills, as well as a keen interest in research and puzzles.• Experience working with large, complex corporate network systems.• TCP/IP, SMTP, DNS, TLS, XML, HTTP, and other common network and application stack protocols require a thorough grasp.• Advanced user of intrusion detection, IDS/IPS, DLP, SIEM, vulnerability scanning, Web gateway, proxy appliances, and antivirus technologies with experience working with Microsoft Hyper-V Server.• Analyze network traffic for security events and discover security incidents via triage.• Identifies and remediates security issues by monitoring and analyzing Security Information and Event Management SIEM.• It is necessary to have a working knowledge of network security monitoring technologies such as SIEM or IDS/IPS technology (ArcSight, Splunk, Sourcefire, FireEye, Snort, etc.).• Examined reports to ensure that access is revoked and/or to identify access that requires manual review.• Deployed and managed campaigns from start to finish.• For auditing purposes, I kept systematic evidence.• Interacted with internal and external audit teams on a regular basis to provide documentation/evidence as needed.• For monitoring and incident response activities, I kept security records.• Excellent analytical, risk-assessment, problem-solving, and communication skills.• Policy and Procedure Compliance with Information Security Policies and Procedures has been monitored.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.