Senior Security Analyst | Vulnerability Management Engineer | GRC Analyst | Threat Detection | SOC

Managed enterprise security vulnerabilities by guiding system owners through risk management and remediation activities. Prioritized critical findings, conducted vulnerability assessments and baseline control scans, and developed processes, metrics, and KRI reporting to improve the vulnerability management program.

Created executive dashboards, remediation scorecards, and reporting packages using Power BI and Excel. Reconciled vulnerability, asset, CMDB, and cloud data across Rapid7 and ServiceNow; coordinated remediation reviews; supported Snyk and Rapid7 InsightAppSec integration into CI/CD; and contributed to threat hunting, incident response, security monitoring, and automation initiatives.

Maintained and improved enterprise security posture by identifying, scoping, prioritizing, and tracking vulnerabilities across systems and applications. Supported continuous improvement of the vulnerability management program using Tenable.io and Nessus, analyzed scanner data, eliminated false positives, and recommended remediation based on MITRE ATT&CK and organizational risk.

Developed Power BI and Excel reporting for remediation performance, patch compliance, KPIs, SLA adherence, and high-risk assets. Validated asset and vulnerability data across Tenable, ServiceNow CMDB, and cloud repositories; administered RHEL and AMI Linux; secured Docker and Kubernetes deployments; and integrated AWS GuardDuty and CloudTrail into security operations with Python.

Supported GRC initiatives, audit preparation, and evidence management for PCI DSS and ISO 27001 compliance. Collaborated with stakeholders to map business processes, establish security policies, maintain access control standards, and improve audit readiness through governance documentation and compliance metrics.

Built security and compliance dashboards, analyzed vulnerability and event data using SQL and Python, and automated risk-ranking and reporting processes. Led DLP implementation activities, enhanced threat detection through analytics and EDR, developed disaster recovery and business continuity plans, and delivered end-user compliance training.

Performed security assessments and documented compliance for Windows and Unix environments. Conducted vulnerability assessments using Qualys, Nessus, and Rapid7; analyzed findings, identified remediation options, eliminated false positives, and produced scan reports for customers and stakeholders.

Supported Symantec Endpoint Protection implementation and troubleshooting, monitored IDS/IPS systems and firewalls, and used SIEM tools for log analysis and threat investigation. Maintained security policies and procedures, supported vulnerability management tooling, coordinated remediation with client teams, and assisted with network equipment maintenance and upgrades.

Master of Science in Computer Information Systems.

Bachelor of Engineering in Civil Engineering.