Skills
Security Information & Event Management: Splunk Enterprise, Microsoft Sentinel, Palo Alto
Malware Analysis & Forensics: Sysmon, Wireshark, Zeek, Security Onion, Autopsy, Redline
Vulnerability Management: Nessus, OpenVAS, Rapid7, Veracode
Network Security: Firewalls, IDS/IPS, VPNs, TCP/IP, Snort, Suricate, NMAP, Tcpdump
Endpoint and Email Security: CrowdStrike, Microsoft Defender, Carbon Black
Identity & Access Management (IAM): RBAC, OAuth 2.0, Active Directory, Privileged Access Reviews
Cloud Security: AWS (IAM, VPC, S3 Encryption, Security Groups, CloudTrail), Azure Security Center Compliance & Governance: CIS Top 18, Cyber Essentials, SOC 2, ISO 27001, NIST CSF, ITIL, COBIT Automation & Scripting: Python, PowerShell, Bash
Ticketing System: ServiceNow, HubSpot, KACE
Additional Skills: Incident Response, Log Correlation, Threat Hunting, Vulnerability Assessment, Risk Mitigation