Edwin Arias Incident coordinator | Security analyst

Security Analyst

First American

Jun 2024 - Current (2 years 4 months)

- Endpoint security management: Analyzing security threats, performing endpoint scans, maintaining the approved application baseline, as well as performing threat analysis for newly approved business applications. (Defender, Threatlocker, SentinelOne)
• Use Cortex XSOAR for case tracking, enrichment, and workflow automation; validate playbooks to ensure proper execution and propose improvements when necessary.
• Conduct fine-tuning of correlation rules and alert workflows to minimize
false positives and strengthen overall detection quality.
• Playbook creation: Plan, develop, and design scenarios and workflows to adjust security response based on identified threats. (Sentinel, IR plan)
• Perform remediation efforts

Security Analyst

Confidential

Feb 2023 - Current (3 years 8 months)

Managing cloud-based security solutions as an MSP for client’s infrastructure. The following are the most recurrent tasks:
-
Triage of alerts:
•
Performing initial triage of alerts to determine their severity, credibility, and urgency.
-
Endpoint security management:
•
Analyzing security threats, performing endpoint scans, maintaining the approved application baseline, as well as performing threat analysis for newly approved business applications.

Junior security staff consultant

EY

Aug 2022 - Jun 2024 (1 year 11 months)

I have participated in various projects within my instance on EY, in which I have acquired abilities such as:

NIST maturity assessment:
• Identified gaps and determined discrepancies between current cybersecurity practices and NIST CSF criteria to highlight areas needing improvement.
• Provided recommendations, which offer targeted, actionable advice for enhancing cybersecurity maturity based on assessment findings.
• Planned for regular assessments, advocating for ongoing evaluations to ensure continuous improvement and adaptation to evolving cybersecurity threats.

SOC analyst:
• Continuously monitor security alerts generated by security information and event management (SIEM) systems and oth

Coordinador de incidencias

Center Source Inc

Aug 2020 - Feb 2023 (2 years 7 months)

As an incident coordinator I have the following responsabilities:

- Creation, analysis and management of incidents.
- Addressing the impact based on issues that affect business continuity.
- NOC monitoring and managing of alerts.
- Splunk basic to intermediate queriying to find related/useful information of ongoing incidents.
- Basic use of graphics tools to enhace visualization of traffic volume. (Grafana)

Help Desk Support Specialist and Junior Security Analyst

Cybernetips

Feb 2020 - May 2021 (1 year 4 months)

As a HD Support Specialist and Junior Security Analyst, I developed the following tasks:

-Hardware and software maintenance.
-Tickets documentation and resolution.
-Firewall managing.
-Vulnerability scanning and reporting.
-Router and Switches basic security configuration.

Intern as Cybersecurity and Investigation Analyst

Privado

Jul 2019 - Dec 2019 (6 months)

Developed tasks:

-Vulnerability scanning and patching.
-Network security and monitoring.
-OSINT.
-Policies and procedures creation.
-Forensics.

Edwin Arias

About

Detail

Timeline

Résumé

Edwin Arias

About

Detail

Behavioral traits