Abdoulaye Barry

Senior Cyber Triage & Forensic Analyst - EY (Ernst & Young) - Austin, TX

(2026-03)

Perform front-line, real-time monitoring, analysis, and correlation of logs and alerts across Microsoft Sentinel, Defender, Azure, Splunk, and Cortex XSOAR to determine which events constitute genuine security incidents.
Investigate an average of 50+ alerts daily, escalated from Level 1 analysts, conducting full endpoint malware analysis to determine scope, impact, and containment strategy.
Work multiple true-positive malware incidents weekly, taking appropriate actions to mitigate and contain threats.
Author full investigation write-ups for leadership, including analysis and root-cause summaries supporting conclusions on whether alerts were benign or true positive.
Escalate qualifying alerts to the detection engineering team, flagging tuning opportunities to reduce noise and improve overall detection accuracy.
Partner continuously with L1 analysts on active cases to provide clarity and assist with complex investigations.
Perform operational threat hunting to proactively surface hidden threats, adversary TTPs, and gaps in existing detection coverage.
Train and mentor newer analysts on SOP guidelines, alert triage methodology, and forensic investigation best practices.

SOC 2 Analyst (Weekend Contract) - Optomi / LevelBlue - Remote

(2026-04 - 2026-07)

Investigated security alerts via Microsoft Defender, Microsoft Sentinel, and FireEye Helix across the HHS environment.
Monitored the HHS environment and analyzed phishing alerts using the PhishER platform.
Created and tracked investigation tickets through the Archer GRC platform for further analysis.
Partnered with the manager and team lead on escalation efforts for potential incidents, facilitating communication with HHS personnel to verify and validate flagged actions.

Incident Response Analyst II - Maveris - Austin, TX

(2024-03 - 2026-03)

Investigated malware, phishing, brute-force, DDoS, and many other types of security alerts daily using Splunk, Microsoft Defender, Microsoft Sentinel, and CrowdStrike.
Performed vulnerability management using Tenable, referencing plugin information to identify, prioritize, and track vulnerabilities via internal network scanning.
Worked multiple true-positive malware incidents weekly, taking appropriate actions to mitigate and contain threats.
Took proper incident response actions following the IR lifecycle to prevent further lateral movement or persistence techniques used by threat actors.
Authored full investigation write-ups for leadership, including analysis and root-cause summaries supporting conclusions on whether alerts were benign or true positive.
Reduced false positive alert rates by 25% through improved detection logic and threat intelligence correlation.
Helped analysts with escalated alerts and handled CISA Known Exploited Vulnerabilities (KEV) notifications, reaching out to appropriate points of contact to resolve identified vulnerabilities.
Led post-incident reviews and contributed to documentation of improved response playbooks.
Trained junior analysts on IR processes, MITRE ATT&CK, and alert handling.

SOC Analyst, Tier 2 - Center for Disability Services - Albany, NY

(2020-02 - 2024-03)

Monitored and triaged alerts from SIEM (Splunk) and endpoint tools to detect anomalies and threats.
Conducted malware and phishing analysis to identify IOCs and update detection rules.
Collaborated with IR teams during major incidents and performed root cause analysis post-resolution.

About