Andrew Deaver
Details
Computer Aided Design
Frederick Community College
2009 : 2011
certificate
Information Security and Assurance
APi Group - Teksystems
Information Security Analyst
Serves as the Senior SOC Tier II Analyst for General Datatech (GDT) supporting the Tyto Army Unified Capabilities program in San Antonio, TX. Specializes in identifying vulnerabilities and threat analysis utilizing Tenable.SC, Tenable.Nessus, McAfee ePO, McAfee EDR, Elastic Logstash and Kibana (ELK), and SPLUNK Enterprise Security tools. Serves as the Subject Matter Expert for ACAS and HBSS in lieu of Tier 3 support and is directly responsible for training team members on all facets of tooling. Directly responsible for building and administering the Tenable SecurityCenter/Nessus deployments and McAfee ePO deployment suite for 12 sites. Manages policies, SQL Database, FW rules, IDS Signatures, AV (VSE), DAT updates, etc. Actively monitors End Point Security (ENS), HIPS rule sets, Virus Scan Enterprise, and logs forwarding to SPLUNK ES. Serves as a functional user to the SPLUNK ES Search Head and troubleshooter for the Indexers/Forwarder deployments. Utilizes SPLUNK as the SIEM tool to actively monitor events, threats, and develops playbooks for the incident response/handling plan to benefit the ARMY UC SCSS program.
2019 :
GDT - General Datatech
Tier 2 SOC Analyst
2018 : 2019
SOCSoter, Inc.
Cyber Security Analyst
2002 : 2006
United States Marine Corps
CPL
Skills
cctv, Computer Security, Counterterrorism, cpr certified, customer service, Cyber-security, Data Security, Enforcement, Firearms, first aid, first responder, Information Security, Information Security Management, Information Technology, leadership, management, microsoft excel, microsoft word, outlook, Patrol, Personal Security, Physical Security, police, powerpoint, Security, security clearance, Tactics, Weapons, xp
About
I am a certified Cybersecurity Analyst with 6 years of experience focusing on Security Operations Center (SOC) operations. I currently hold a Secret Security Clearance and a Veteran of the United States Marine Corps. My experience has led me to specialize in Cybersecurity from the Vulnerability Management, End-Point Detection and Response (EDR), Security Information and Event Management (SIEM), Active Directory, vSphere, vCenter, Patch Management, and SysAdmin work on Linux and Windows. I provide a team with strong critical thinking, communication, and people skills. I perform my best work in high-stress, fast-paced, and challenging environments while focusing on accuracy and efficiency.