Bryson Garcia

SOC Analyst with 2 years of hands-on security operations experience investigating and responding to security incidents across corporate, client, and DoD environments. Experienced in SIEM monitoring, alert triage, phishing analysis, incident investigation, EDR, network traffic analysis, and threat detection using Splunk, ArcSight, Microsoft Defender, Wireshark, and other security tools. Bachelor's degree in Cybersecurity with CompTIA Security+ certification.

SOC Analyst at Motorola Solutions (2024-01 – 2025-12)

• Monitored, triaged, and investigated 40+ daily security alerts across SIEM, EDR, and email security platforms supporting corporate, client, and DoD environments.
• Performed Tier 1/Tier 2 security incident analysis using Splunk, ArcSight, and endpoint security tooling to identify malicious activity, determine scope, and escalate confirmed incidents.
• Investigated suspicious authentication activity including repeated login failures, anomalous devices, unusual geographic locations, and potentially compromised accounts.
• Analyzed suspected phishing attacks by examining email headers, URLs, attachments, sender infrastructure, and indicators of compromise (IOCs).
• Investigated potential data exfiltration and suspicious endpoint/network activity, documenting findings and providing detailed escalation packages to incident response teams.
• Analyzed recurring false-positive SIEM alerts and provided investigative findings to support detection rule tuning, improving alert quality and escalation efficiency.
• Documented investigation findings, incident timelines, affected assets, indicators, and recommended actions for escalation to incident response.

Service Desk Analyst at Crossfuze (2022-08 – 2023-08)

• Provided Tier 1/Tier 2 technical support across multiple client environments, troubleshooting Active Directory accounts, VPN connectivity, home network/Wi-Fi, IP configuration, hardware, and software issues.
• Administered Active Directory user accounts, including password resets, account unlocks, and access-related troubleshooting.
• Investigated endpoint issues using antivirus/security software, documented findings in ServiceNow, and escalated suspected security incidents for further investigation.
• Managed and maintained ServiceNow Knowledge Bases for two client environments, documenting technical procedures, common issues, and resolution steps.
• Supported the onboarding of a new client environment, helping develop and organize the ServiceNow Knowledge Base and technical documentation required for service desk operations.

NOC/Tier 1/Tier II Help Desk Technician at Corporate Technologies (2021-05 – 2022-01)

• Monitored client networks, servers, and IT infrastructure, responding to system alerts and escalating network or server issues as appropriate.
• Administered Microsoft 365 and Active Directory, including user account management, password resets, license administration, group membership, and email domain blocking.
• Performed routine infrastructure maintenance, including server patching and updates to network devices such as routers and switches.
• Provided on-call monitoring and support for client environments, identifying and escalating critical network, server, and infrastructure incidents.

Cryptologic Technician Networks (CTN) at United States Navy (2011-07 – 2018-08)

• Conducted network monitoring and analysis in support of U.S. Navy cybersecurity operations.
• Analyzed network activity to identify and assess potential security threats while operating within established security procedures.

Bachelor of Science in Cybersecurity – Dunwoody College of Technology

Associate of Applied Science in Computer Networking Systems – Dunwoody College of Technology