Achu Nji

I am a cybersecurity Professional with over 7 years of cumulative experience in Information Security, Security operation, Incident response, cloud security, Insider threat and Data Loss Prevention, Risk Assessment, and Governance Risk & Compliance, responsible for monitoring, investigating, analyzing, and responding to security incidents across network, application, and endpoint domains. I bring strong communication and leadership skills to the table, consistently delivering results in a timely manner to senior executives within organizations.

LEAD SECURITY OPERATIONS ANALYST (SOC) - ConEdison - Valhalla, New York

(2021-04)

• Support incident response until resolution, following Standard Operating Procedures (SOP).
• Prioritize and distinguish between potential intrusion attempts and false alarms.
• Assist in developing processes and procedures to improve incident response times, incident analysis, and overall SOC functions.
• Respond to computer security incidents by collecting, analyzing, and preserving digital evidence, ensuring incidents are recorded and tracked per organizational SOC requirements.
• Use McAfee DLP to protect intellectual property and ensure compliance by safeguarding sensitive data.
• Assist in creating new use cases and performing SOC testing.
• Create and update SOC run books as needed.
• Consistently monitor and manage alerts generated by Splunk.
• Assist in developing Splunk dashboards to capture customized logs from systems and applications.
• Investigate attachments and links for embedded malware using FireEye ETP, IronPort, and ThreatGrid.
• Escalate incidents to tier 2 and incident response analysts for further analysis.
• Provide clients with secure solutions for escalated issues.
• Train new employees on handling investigations and phishing emails safely.
• Develop action plans to resolve reportable issues and collaborate with IT teams to address security threats and incidents.

SECURITY OPERATIONS ANALYST (CSIRT) - Target Corporation - Minneapolis, MN

(2017-03 - 2021-04)

• Proficient in using Security Information and Event Management (SIEM) technologies to analyze security log events during incidents.
• Developed Detection and Response (EDR) platforms for investigating, triaging, containing, and remediating security incidents.
• Expert in static and dynamic malware analysis for triaging cybersecurity incidents, performing endpoint malware reverse engineering, documenting malware behavior, and developing prevention and detection capabilities using SOC tools.
• Skilled in utilizing Data Loss Prevention (DLP) technologies to investigate potential data loss and exfiltration incidents.
• Experienced in conducting cloud security incident investigations using AWS, Azure, and Microsoft Cloud Defender.
• Expert in managing email security threats and controls with Office365, analyzing email headers and content for threat identification and remediation.
• Proficient in network analysis using Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) to identify and contain malicious threats.
• Deep knowledge of threat and vulnerability analysis

BSC - Computer Science - University of Buea Cameroon