Juan Monzon
Details
Computer Science
The University of Kansas
Masters of Arts
Econometrics and Quantitative Analysis
University of Missouri-Kansas City
•Automate manual processes in Excel, Analyze, cleanse, and manipulate complex raw data from various sources using Python.
2022 : Present
NextEra Energy Resources
CyberSecurity Compliance and Risk Analyst (NERC CIP)
Provided Critical Infrastructure Protection and security of the Bulk Electric System(BES) Cyber Assets that support the power grid. Primary responsibilities included real-time security and compliance monitoring and enforcement with North American Electric Reliability Corporation Critical Infrastructure (NERC CIP) framework. Responding to critical physical/cyber security events, incident triage, and cyber security incident response (CSIRT). Ensured that all security-related incidents/violations were immediately reported, data collected, investigations were conducted, and corrective action measures were implemented and in compliance with NERC CIP standards.
• Tier-1 Help-Desk support for testing and troubleshooting of physical security systems.
• Monitored configuration of Physical Access Control System devices and servers.
• Enforced and implement operational and procedural controls to manage physical access to BES Cyber Systems as required by CIP compliance policy.
• Performed weekly audits to ensure NERC CIP compliance.
• Reported all potential NERC CIP violations to the Manager of Critical Infrastructure for investigation and remediation.
2022 : 2022
NextEra Energy Resources
Senior Security Operations Center Specialist
Assisted shift lead with NERC CIP compliance monitoring and enforcement. Physical security monitoring and incident response. Monitored security systems for functionality and conducted basic troubleshooting and assessment prior to escalating issues to systems technical staff. Managed Security Operations Center in-box and monitored incoming emails for security threats and escalated per procedure. Accurately process security events and provide incident tracking, documentation, and notifications
• Collaborate with internal/external agencies to provide support for various events, intelligence/analytics, investigations, incident response, and disaster recovery.
• Identified improvements within processes, procedures, policies, and training to improve daily operations.
2019 : 2022
NextEra Energy Resources
Security Operations Center Specialist l
NERC CIP compliance monitoring and enforcement of procedural controls.
2017 : 2019
NextEra Energy Resources
SOC Specialist ll
2016 : 2017
NextEra Energy Resources
SOC Specialist - FPL Contractor
Skills
Access Control, Active Directory, Backup & Recovery Systems, Change Management, Computer Forensics, Cryptography, Cybersecurity, Cyber Threat Intelligence (CTI), Data Analysis, Data Security, Disaster Recovery, Disaster Response, Firewalls, Incident Response, Information Security, Kali Linux, Leadership, Matplotlib, Microsoft Office, NERC CIP, Network Administration, Network Configuration, Network Security, Network Troubleshooting, Nmap, Pandas (Software), Penetration Testing, Powershell, Python (Programming Language), Reconnaissance, Risk Assessment, Risk Management, Security Information and Event Management (SIEM), Security Operations, ServiceNow, Splunk, System hardening, System Recovery, Tenable Nessus, Threat & Vulnerability Management, Threat Analysis, Threat Detection, Troubleshooting, Ubuntu, Virtual Private Network (VPN), VMware, Vulnerability Assessment, Vulnerability Scanning, Windows Server, Wireshark
About
Physical and Cyber Security professional with seven years of experience in NERC CIP compliance, Backup & Recovery, Infrastructure Security, Cybersecurity, and Risk Mitigation within the Renewable Energy industry. Critical Thinker with an Industrious work ethic focused on making an impact and protecting the world from Skynet.
Specialties: Python for data science and Excel automation. Data Manipulation, Visio flow charts, mentoring, figuring stuff out, grit, and making NERC CIP compliance fun and interesting.
I also enjoy life outside of NERC CIP. Some of my hobbies include: Brazilian JiuJitsu, Disc Golf, Sports, Cars
Certifications: GAIC Critical Infrastucture Protection(GCIP), CompTIA Security+, CompTIA Network+
More Python.