Goodness Ibeh

I am a cyber security and Web services professional with years of experience in the digital space. I transitioned from design and development to the cybersecurity space with CyberSoc Africa. In my role of Cyber Security Analyst for CyberSoc Africa, I analyzed and monitored data from several security solutions deployed by several banks and other financial institutions within and outside Nigeria.

These solutions included SIEMs (Microfocus Arcsight, Alienvault, IBM QRADAR) and End Point Detection And Response Systems (Microsoft Defender for End Point, DarkTrace, VMWare Carbon Black, RSA Netwitness). I've been involved in the deployment and engineering of these solutions thanks to my understanding of how they should be used and what Data they should capture.

My Progress at CyberSOC which is rated as the best MSSP in Africa led me to an information security analyst role at one of Africa's biggest FinTech giants, eTranzact PLC, where i currently lead the SOC team while working with various tools such as WAF, SIEM, IPS, XDR, FIM, DAM, Firewalls, NAC, etc

I am detail driven with an eye for spotting anomalies. My analytical skills are sharp and I am able to solve complex problems. I possess excellent time management skills and am able to meet deadlines for multiple projects.

I am very knowledgeable in the use of computers and programs geared toward digital security. I am often the go-to person on staff for assistance with repairing glitches and understanding errors. I would love the opportunity to be your company’s go-to person as your next Cyber Security Analyst.

I am quite certain you will find my expertise and talents to be what you are looking for in a Cyber Security Analyst should you need one.

INFORMATION SECURITY ANALYST – NOVEMBER 2022 – DATE eTRANZACT INTERNATIONAL LIMITED - Lagos, Nigeria

• ISO 27001: Assistant ISMS Manager – 
• Managing highly technical staff to accomplish enterprise and personal development goals
• Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program to ensure that the integrity, confidentiality and availability of information is owned, controlled or processed by the organization.
• Liaise with the enterprise architecture team to ensure alignment between the security and enterprise architectures, thus coordinating the strategic planning implicit in these architectures.
• SOC: 
• Provide recommendations and administer the updating of rules and signatures; such as intrusion detection/protection systems, firewalls, endpoint protection systems, SIEM and DLP rule policy changes, to improve system monitoring and reporting
• Triage and analyse events and incidents using Alienvault Appliance (SIEM), ELK Stack (Elasticsearch, Kibana, Beats & Logstash) McAfee ePO, McAfee DAM, AlgoSec Firewall Analyzer, AppTrana WAF, Forescout NAC, Sentinel One (XDR), NNT - File Integrity Monitoring.
• Physical Security investigations (CCTV)
• Phishing analysis and investigations
• Ensure organizational compliance with industry standards like PCI DSS and ISO.
• Liaise with the Managed Security Service Providers to improve enterprise security posture.
• THREAT INTELLIGENCE: 
• Provide feedback on security control capability gaps based on security intrusion trends.
• Data scraping threat intelligence providers to obtain IOC’s and remediate/prevent related incidents
• Develop and maintain analytical procedures to improve security incident identification efficiency
• APPLICATION SECURITY:
• Static Application Security Testing using Checkmarx
• Web Application Security Testing using Burpsuite
• BUSINESS REQUIREMENTS DOCUMENTS:
• Analysing and giving recommendations on new projects and business 

CyBERSOC AFRICA - Lagos, Nigeria

• Evaluate threats against critical organizations in the banking, telecommunications and financial technologies in a 24x7x365 MSSP environment and initiated escalation of immediate threats with clients when necessary.
• Provide recommendations and administer the updating of rules and signatures; such as intrusion detection/protection systems, firewalls, endpoint protection systems, SIEM and DLP rule policy changes, to improve system monitoring and reporting
• Experience utilizing an enterprise centralized log/event correlation solution for security investigations and auditing employee behaviour (ArcSight, QRadar, Alienvault, VMWare Carbon Black, Cylance, Microsoft Defender Advanced Threat Protection (ATP) & RSA Netwitness)
• Investigate security events (e.g., unauthorized access, non-compliance with company policies, service exploitation, etc.) to determine malfunctions, breaches, and remediation steps
• Assist in Information Security Incident Response and Threat Hunting activities for large organisations as a 1st line security analyst to identify various malicious threats in enterprise environments.
• Ensure organizational compliance with industry standards like PCI DSS and ISO
• Built and implemented a shift reporting system for SOC analysts, using Microsoft PowerApps, thereby improving handover processes.
• Serve as a shift lead and an escalation point for difficult problems and complex inquiries
• Provide feedback on security control capability gaps based on security intrusion trends
• Develop and maintain analytical procedures to improve security incident identification efficiency

B.Tech, Computer Science