Devan McClure

Cybersecurity Analyst

Amentum

Aug 2024 - Current (1 year 10 months)

• Triaged Splunk and FireEye alerts; investigated phishing attempts and determined email safety, reducing false positives by 40%. • Developed and deployed Python scripts to detect data anomalies across government datasets. • Improved SOPs and streamlined incident response processes resulted in a 30% decrease in analyst onboarding time. • Collaborated with federal agencies (e.g., Dept of the Treasury, CISA, FBI) on weekly threat briefings. • Tuned Splunk to reduce false positives and improve threat visibility and incident response efficiency.

SOC Analyst

SkillStorm

Oct 2023 - Feb 2024 (5 months)

• Conducted penetration testing using Nessus, Nmap, and Metasploit, resulting in the remediation of 12 critical vulnerabilities. • Created Splunk dashboards to assist in alert monitoring, visualization of threats, and incident response triage. • Researched and applied security principles from MITRE ATT&CK, OWASP, and SANS to visualize threats and support incident triage. • Documented incident reports and recommended process improvements to leadership, strengthening the team's response capabilities.

Tier 2 Support

System Soft Technologies

Aug 2022 - Aug 2023 (1 year 1 month)

• Provided technical support across multiple counties using ServiceNow, improving incident response time by 35%. • Managed Microsoft 365 and Azure AD environments, including automation via PowerShell to improve operational efficiency by 50%. • Configured telecom hardware (Avaya, Teams) and supported cloud-based infrastructure, improving reliability and uptime.

U

Field IT Engineer

U.S. Air Force Pro IT

Apr 2016 - Aug 2022 (6 years 5 months)

• Trained 75+ personnel and led infrastructure projects, including AV deployments and firewall configurations. • Improved maintenance workflow efficiency by 50%, saving the Air Force $ 1.5 B. • Monitored and remediated threats using SolarWinds and deployed Palo Alto firewalls. • Spearheaded the configuration and management of multiple client environments across Microsoft 365, Google Cloud Platform, and Azure; implemented security protocols and onboarding workflows, leading to a 40% increase in efficiency and improved security compliance.

N

Junior Database Administrator

NaviSite (RDX)

Jul 2015 - Mar 2016 (9 months)

• Maintained SQL and Oracle databases; resolved critical errors and improved system uptime. • Reviewed scripts for vulnerabilities and recommended security enhancements.

About

Detail

Timeline

Résumé