Paradise Global, Fully Stack Developer and Security Vancouver, BC
October 2022 – December 2022 (3 months)
- Managed the website / e-shop for Paradise Global Business Mission Wellness Education Inc.
- IT / Cybersecurity Lead
MNP Digital, Technology Solutions Analyst, Cyber Security (DFIR / Purple Team) Vancouver, BC
June 2021 – June 2022 (1 year)
- Wrote elite, detailed, and precise reports for MNP clients matching them to the MITRE ATT&CK cycle and TTPs.
- Reverse engineered malware statically and dynamically to find IoCs and malicious Win32 API calls and functions.
- Performed technical investigations on majority of ransomware / data breach security incidents to identify root cause analysis for well-known and large industrial, commercial, and municipal cases.
- Championed and assessed complex TTXs (table-top exercises) to support security awareness and maturity
- Participated in workshop creation for teaching staff about Powershell deobfuscation and malware reverse engineering
- Wrote Python scripts to sort and analyze big data for breached data
Mosse Cyber Security Institute, Remote Intern Vancouver, BC
June 2020 – January 2022 (1 year 8 months)
- Performed network vulnerability scans.
- Exploited vulnerabilities with state-of-the-art hacking tools like Metasploit.
- Defended web applications against common vulnerabilities such as SQL injection, XSS, etc.
Global Relay, Cyber Security Specialist
March 2019 – June 2020 (1 year 4 months) Vancouver, BC
- Scripted in Python, BASH, and PowerShell to automate reporting for different systems using appropriate REST APIs.
- Worked with ArcSight / Splunk SIEM to triage incidents for the CSOC (Cyber Security Operations Center).
- Worked with different types audits: ISO 27001/2 and SOC 2 Audits.
- Monitored the CSOC Operations in a 12-hour shift basis.
Lululemon Athletica, Incident Response Analyst
May 2016 -- May 2017 (1 year 1 month contract) Vancouver, BC
- Worked with Trustwave SIEM to analyze log collection.
- Provided incident response to incoming incidents relating to malware and built IRP (incident response procedures).
- Knowledge of authentication and authorization mechanisms (SSO and MFA) for hardening Windows Server.
- Trained with Carbon Black suite: CBDefense and CBResponse
- Experience with IDSes and IPSes such as FireEye, TippingPoint, Symantec Endpoint (SONAR) to detect attacks before they come into place.
- Used Mandiant RedLine to analyze indicators of compromise, Internet history artifacts, and related activities.
- Escalated tickets to ServiceNow for quick incident response.
- Used Autopsy and FTK Imager to examine and analyze electronic media in suspected hacking and malware cases.
- Created KB (knowledge-base) documents for lower levels of Corporate Support and Store Support to follow.
- Drove SLAs to completion within a timely basis for critical malware alerts.
- Proficient with PowerShell and experienced in Windows server/client OS, Active Directory, and O365.
- Worked with different types of frameworks: SOX, NIST, and PCI-DSS.
Implemented security best practices at lululemon's Security Awareness Day
