Steve A Bamigboye
Information Security Analyst – Vulnerability Management
Hire this person
Send a job offer directly to this candidate
About
Results-driven Information Security Analyst with 5+ years of progressive experience in enterprise vulnerability management, threat intelligence, and SOC operations across hybrid IT/OT environments. Proven ability to identify, triage, and coordinate remediation of vulnerabilities across 5,000+ assets with 99.9% scan coverage. Skilled in NIST CSF, NERC CIP concepts, MITRE ATT&CK TTP mapping, and cross-functional team collaboration.
Adept at maintaining security metrics, supporting continuous process improvements, and communicating risk posture to stakeholders at all levels. Holds CISM, CompTIA CySA+, Security+, ISC2 CC, and multiple AWS certifications.
Experience
Information Security Analyst – Vulnerability Management - Wawanesa Insurance - Winnipeg, Canada
(2023-10)
- Supported corporate-wide vulnerability management services across 5,000+ hybrid IT assets, achieving 99.9% scan coverage and identifying 12% more exploitable risks within the first 60 days — directly aligned to TVM Lead direction.
- Triaged and disseminated actionable threat intelligence by mapping CVEs to MITRE ATT&CK TTPs, reducing vulnerability triage cycle time by 30% and improving coordination with infrastructure and patching support teams.
- Identified, tracked, and coordinated remediation of unapproved software and security misconfigurations, leveraging CrowdStrike Falcon to improve exploitability detection accuracy by 30%.
- Executed OWASP Top 10 application scanning assessments across web-facing applications, coordinating findings with development teams and maintaining governance documentation for scan tool usage and remediation tracking.
- Supported quarantine management activities by coordinating containment workflows during critical incidents, ensuring minimal operational disruption and maintaining audit-ready closure trails in ServiceNow.
- Designed and maintained NIST-aligned vulnerability triage and incident response playbooks, standardizing analyst protocols and reducing response variance by 60%.
- Delivered executive dashboards via Splunk and Excel tracking SLA performance, risk trends, and key vulnerability management metrics for senior stakeholders.
- Championed PCI DSS vulnerability compliance program, reducing remediation timelines from 28 to 12 days through structured exception handling and compensating control documentation.
- Provided backup escalation support for Tier 1 analysts on critical and zero-day vulnerabilities, serving as a bridge between infrastructure, cloud, application, and engineering teams.
- Available and responsive for significant cyber security incident support on a 24-hour basis to assure system security and reliability.
Senior Command Center Technician (NOC) - Wawanesa Insurance - Winnipeg, Canada
(2022-03 - 2023-10)
- Triaged and escalated 100+ security and operational alerts weekly using Splunk and ServiceNow in a 24/7 enterprise environment, achieving zero missed SLAs across all critical incident escalations.
- Supported incident response workflows during three critical enterprise incidents, coordinating rapid containment and recovery actions to ensure minimal operational disruption.
- Authored and maintained SOC runbooks and operational playbooks, reducing new analyst onboarding time by 40% and standardizing escalation procedures across the command center team.
- Maintained precise ticketing records in ServiceNow ensuring CMDB data integrity and audit-ready closure documentation.
Network Analyst - Shaw Communications - Winnipeg, Canada
(2020-05 - 2022-03)
- Deployed and hardened Cisco Meraki security controls across enterprise network infrastructure, increasing threat detection visibility by 30% and strengthening perimeter security posture.
- Resolved complex network incidents within SLA requirements, troubleshooting connectivity, routing, and security control issues to maintain business continuity and uptime commitments.
Managed Technical Specialist - Shaw Communications - Winnipeg, Canada
(2019-04 - 2020-05)
- Configured and troubleshot enterprise Meraki networking devices and enforced endpoint security protocols, providing Tier 2 technical support with a focus on rapid issue remediation.
Technical Support Representative - Shaw Communications - Winnipeg, Canada
(2016-10 - 2019-04)
- Provided first-line support across networking and infrastructure systems.
- Raised client satisfaction by 40% through personalized assistance.
Education
Certificate - Network Security - University of Winnipeg & MITT (2021)
M.Sc. - Computing - University of Wales (2010)
Postgraduate Diploma - Strategic Business IT - NCC Education, London (2008)