Robert ***

CAREER SUMMARY

Senior Cybersecurity Analyst with 10 years of experience protecting enterprise IT environments through security monitoring, threat detection, incident response, vulnerability management and security risk assessment. Experienced in Security Operations Centre (SOC) environments, SIEM platforms, endpoint security, network security and security incident investigations. Strong background analysing security events, identifying indicators of compromise, investigating suspicious activity and coordinating incident response activities across complex technology environments. Experienced in developing security monitoring processes, improving detection capabilities and supporting security governance and compliance requirements. Strong ability to work with infrastructure, cloud, network, application and risk teams to identify security weaknesses and implement practical security controls.

EDUCATION

University of New South Wales, Sydney NSW
Bachelor of Computer Science — Cybersecurity, February 2012 – December 2015

EXPERIENCE

Enterprise Cybersecurity Services, Sydney NSW — Senior Cybersecurity Analyst, January 2020 – Current

Lead security monitoring, threat detection and incident response activities across enterprise IT and cloud environments.
Monitor and analyse security events using SIEM, endpoint detection and response and network security platforms to identify suspicious activity and potential threats.
Investigate security incidents by analysing logs, alerts, endpoint activity, network traffic and indicators of compromise.
Perform incident triage, containment, eradication and recovery activities in accordance with established incident response procedures.
Develop and refine security detection rules, correlation logic and alerting mechanisms to improve threat detection capabilities.
Conduct threat hunting activities to identify previously undetected malicious activity and potential security weaknesses.
Perform vulnerability assessments and coordinate remediation activities with infrastructure, application and cloud engineering teams.
Analyse vulnerability reports, prioritise security risks and track remediation activities based on business impact and technical risk.
Support endpoint security initiatives including EDR deployment, endpoint monitoring, malware investigation and security configuration.
Investigate phishing, credential compromise, suspicious authentication activity and other security events affecting enterprise users and systems.
Collaborate with network, cloud, infrastructure and application teams to investigate security issues and implement appropriate remediation measures.
Prepare detailed incident reports, investigation findings, security recommendations and management summaries.
Support security risk assessments, control reviews and compliance activities across enterprise technology environments.
Develop and maintain cybersecurity procedures, incident response playbooks, technical documentation and security monitoring processes.
Mentor junior security analysts and provide technical guidance on incident investigation, threat detection and security analysis.
Present security findings, incident trends and risk observations to senior technical stakeholders and cybersecurity leadership.

Technology Security Group, Sydney NSW — Cybersecurity Analyst, January 2016 – December 2019

Monitored enterprise security environments through SIEM and security monitoring platforms to identify potential cyber threats and security incidents.
Investigated security alerts, suspicious network activity, authentication anomalies and endpoint security events.
Performed initial incident triage and escalated confirmed or high-risk incidents according to established response procedures.
Analysed system, application, firewall, proxy and authentication logs to identify indicators of compromise and potential attack activity.
Assisted with vulnerability scanning, security assessments and remediation tracking across servers, endpoints and network infrastructure.
Supported endpoint protection and security monitoring technologies to improve visibility across corporate environments.
Assisted in phishing investigations, malware analysis and compromised-account investigations.
Developed security reports and documented investigation findings, incident timelines and recommended remediation actions.
Supported threat intelligence activities by researching emerging threats, indicators of compromise and relevant attack techniques.
Worked with infrastructure and network teams to implement security controls and resolve identified vulnerabilities.
Assisted with security audits, compliance assessments and documentation of cybersecurity controls.
Participated in incident response exercises and contributed to improving security procedures and response playbooks.
Supported security awareness initiatives by identifying common security issues and communicating practical security recommendations to internal teams.

TECHNICAL SKILLS

Security Operations: SOC operations, security monitoring, threat detection, incident response, incident triage, threat hunting, security investigations

SIEM & Detection: Splunk, Microsoft Sentinel, IBM QRadar, log analysis, correlation rules, detection engineering, security alerting

Endpoint Security: Microsoft Defender for Endpoint, CrowdStrike Falcon, endpoint detection and response, malware investigation, endpoint monitoring

Network Security: Firewalls, IDS/IPS, VPN, network traffic analysis, DNS security, proxy security, network monitoring

Threat Intelligence: Threat intelligence analysis, indicators of compromise, MITRE ATT&CK, threat hunting, attack analysis, emerging threat research

Vulnerability Management: Vulnerability assessment, vulnerability scanning, risk prioritisation, remediation tracking, patch management, security configuration

Incident Response: Incident investigation, containment, eradication, recovery, forensic analysis, phishing investigation, compromised account investigation

Cloud Security: AWS security, Microsoft Azure security, cloud monitoring, IAM, cloud vulnerability management, security logging

Security Tools: Splunk, Microsoft Sentinel, QRadar, Nessus, Qualys, Wireshark, Nmap, Microsoft Defender, CrowdStrike

Security & Governance: Risk assessment, security controls, ISO 27001, Essential Eight, security policies, compliance, security audits

Professional Skills: Technical leadership, analytical thinking, incident management, problem-solving, stakeholder communication, mentoring, technical reporting and risk communication

Education

2012-02 to 2015-12
Bachelor of Computer Science — Cybersecurity
University of New South Wales, Sydney NSW

Skills

Cybersecurity | Security Operations | SOC | Threat Detection | Incident Response | Security Monitoring | Threat Hunting | SIEM | Splunk | Microsoft Sentinel | IBM QRadar | Security Analysis | Incident Investigation | Digital Forensics | Vulnerability Management | Vulnerability Assessment | Nessus | Qualys | Endpoint Security | EDR | CrowdStrike | Microsoft Defender | Network Security | Firewall | IDS/IPS | Wireshark | Nmap | Threat Intelligence | MITRE ATT&CK | Malware Analysis | Phishing Investigation | Cloud Security | AWS Security | Azure Security | IAM | Risk Assessment | ISO 27001 | Essential Eight | Security Auditing | Security Compliance | Security Controls | Security Governance | Detection Engineering | Security Reporting | Technical Leadership | Incident Management | Stakeholder Management | Mentoring

Occupation: Senior Cybersecurity Analyst

Experience: 10 years

Location: New South Wales, Australia

Skills: SIEM, Security, Penetration Testing

Experience: 10 years

Daily rate: AUD 700

Fictional sample profile — replace with your approved candidate details.