Mònica M.

- Research and authore white paper advocating a framework for managing risk to the most critical DoD systems. - Implement a manage endpoint security solution utilizing Crowdstrike and Microsoft Defender to secure workstations and servers. - Use Splunk and Crowdstrike, among other tools for security response to triage security issues. - Interrogate and monitor agency network traffic and conduct network vulnerability security assessments on DoD networks. - Analyze security reports (Appscan, Nessus, Red Teams) to identify vulnerabilities and create mitigation strategies. - Provide remediation plans for non-compliant servers - Analyze security and firewall logs and investigate all irregularities as needed. - Maintain confidentiality of information residing in corporate databases, workstations, servers, and other systems. - Assist in the development of security policies, plans, and procedures to meet government regulations and industry best practices. - Train new and current cyber security analysts on existing or new technologies, new or existing processes. - Maintain SOC Dashboards in Splunk. - Hunt for current threats on SIEMs based on information provided by news and government sources. - Act as lead in incident response and analysis. - Maintain quality control of tickets and overall quality of all SOC related tasks.

- Threat hunting projects - Forensics acquisitions and analysis - Incident response - Remote analysis and acquisition with GRR and F-Response - Monitoring and vulnerability analysis of SIEM security events (DLP/TCP/IP/VPN/Firewall/Proxy/Windows events/EDR) through different solutions (Splunk, Qradar, Arcsight, Kibana). - Development and implementation of event-based security alerts and monitoring (DLP/TCP/IP/VPN/Firewall/Proxy/Windows events/EDR/IPS/IDS) via different solutions (Splunk, Qradar, Arcsight, Kibana)

- Linux server configuration - HTML - PHP - CSS - Database management.