Jeffrey Francisco cruz

V

Sr. Security Operations Analyst (2nd Shift)

Village Medical

Sep 2024 - Current (1 year 10 months)

Investigated 10–15 actionable alerts per day across Exabeam, Defender XDR/O365, EDR, and email security tools, performing containment and documentation. Analyzed Cyberhaven DLP events, escalating confirmed risks and tuning policies. Conducted advanced KQL investigations in Defender/Sentinel to correlate user, device, email, and identity activity. Helped design and maintain Intune and JAMF MDM configurations, including macOS baselines, compliance rules, and app/security deployments. Validated endpoint compliance and agent health across large batches of macOS and Windows devices. Participated in weekly MSSP meetings to review escalations, refine playbooks, and improve SOC workflows. Performed eDiscovery tasks on an as needed basis for Legal.

V

Security Operations Analyst (2nd Shift)

Village Medical

Nov 2023 - Sep 2024 (11 months)

Investigated daily alerts across Defender, Exabeam, EDR, and email security. Performed triage, correlated suspicious behavior, and escalated verified incidents. Performed eDiscovery tasks on an as needed basis for Legal. Reviewed DLP and insider risk events for policy alignment and escalation. Supported SOC 2 readiness through evidence collection and control validation. Authored SOPs/runbooks to streamline Tier 1 Tier 2 workflows. Partnered with IAM/Infrastructure on access corrections and endpoint compliance.

Security Operations Analyst

Capital Markets Gateway

Mar 2022 - Mar 2025 (3 years 1 month)

Managed endpoint vulnerability lifecycle across Windows/macOS. Administered Intune and Kandji MDM: enrollment, compliance, config profiles, security baselines, app deployments. Supported IR via Defender, Cloud App Security, Sentinel triage and containment. Built/tuned SOAR playbooks in Sentinel. Conducted Azure AD audits to enforce least privilege. Authored Confluence documentation for secure configurations. Supported DLP and identity anomaly investigations.

Application Support Analyst

Capital Markets Gateway

Apr 2021 - Mar 2022 (1 year)

Provided Tier 2 remote support across Windows/macOS/SaaS. Managed Apple/Dell asset lifecycle, imaging, repairs, and inventory. Built Intune configurations: profiles, compliance, app deployments, Autopilot/DEP workflows. Developed onboarding/offboarding documentation using Azure AD & Intune. Supported Defender alerts and endpoint posture improvements. Validated patch deployments and troubleshooting failed updates. Supported authentication issues, Zscaler connectivity, networked printers.

Senior Desktop Technician

Nordstrom

Oct 2019 - Apr 2021 (1 year 7 months)

Provided Tier 2 onsite support for warehouse endpoints and RF scanners. Troubleshot RF scanner connectivity and hardware issues, ensuring minimal downtime in warehouse operations. Diagnosed scanner/backend issues using SQL Server Management Studio. Monitored database health using Idera and basic SQL queries (e.g., SELECT statements) to identify deadlocks, row locks, and blocked processes on MSSQL and MySQL. Collaborated with database engineers to troubleshoot and resolve backend database issues impacting warehouse applications and inventory processes. Acted as project lead during the Hautelook Nordstrom migration, including Citrix Horizon View transition. Served as senior technician, handling escalations and acting supervisor. Trained/mento

A

Technology Specialist

Arrowhead Credit Union

Dec 2018 - Oct 2019 (11 months)

Provided remote/onsite support for credit union staff. Managed WDS server imaging and workstation deployments. Served as secondary POC for network monitoring system. Conducted Nessus scans before workstation deployment. Supported general Windows troubleshooting and process documentation.

N

Tier 1 Technician

Nordstrom Rack Hautelook

Oct 2016 - Oct 2019 (3 years 1 month)

Onboarded users and provisioned accounts following least privilege. Configured workstations and supported PC/application issues. Authored documentation/runbooks to standardize support operations. Supported SOX/PCI processes by following required controls. Provided frontline support for RF scanners, assisting warehouse staff with device setup, usage, and basic troubleshooting. Troubleshot RF scanners and backend issues using SQL queries. Monitored database performance using Idera and basic SQL queries (e.g., SELECT statements) to pinpoint deadlocks, row locks, and blocked processes on MSSQL and MySQL. Collaborated with database engineers to escalate and resolve database issues discovered during daily warehouse operations. Built/maintained go

Jeffrey Francisco cruz

About

Detail

Timeline

Résumé