Carlo Odisho

Passionate Cybersecurity Analyst with a strong foundation and proficiency in cybersecurity, specializing in vulnerability assessment and incident response. Actively pursuing opportunities to enhance cybersecurity expertise and stay updated with the latest trends and advancements through diverse courses, certifications, and personal projects.

SOC Analyst - Discover Financial Services - Riverwoods, IL

(2024-11)

• Triage, prioritize, and escalate security alerts through Minerva Alerts Queue, ensuring timely detection and containment of potential threats.
• Analyze and investigate suspicious emails using Proofpoint, including advanced phishing campaigns, malicious URLs, and attachments, to mitigate email-based threats.
• Leverage Demisto (Cortex XSOAR) playbooks to automate phishing triage, perform threat enrichment, and streamline incident response workflows, reducing manual effort and response times.
• Use Splunk (SIEM) to collect, correlate, and analyze logs from various data sources, performing in-depth investigations and identifying Indicators of Compromise (IoCs).
• Utilize Databricks to query and analyze large datasets during security investigations, correlate events, identify suspicious activity, and support incident triage and threat analysis.
• Conduct endpoint and email threat analysis using Microsoft Defender, focusing on malware detection, remediation, and preventing lateral movement.
• Utilize SentinelOne EDR for real-time endpoint monitoring, behavioral analysis, and forensic investigations of suspicious activities or compromised hosts.
• Utilize CrowdStrike Falcon for daily EDR investigations, alert triage, threat hunting, IOC analysis, and malware sandbox analysis.
• Employ Exabeam UEBA to detect insider threats and anomalous user behavior by analyzing risk scores and unusual account activities.
• Collaborate with incident response teams to remediate security incidents, improve detection rules, and enhance response procedures.
• Document incident findings and contribute to knowledge base articles to improve SOC efficiency and team learning.
• Utilize IBM Security QRadar SOAR to create, track, and escalate security tickets to Incident Response (IR) and DFIR teams, ensuring proper handoff of critical incidents for deeper investigation.
• Perform incident response duties during investigations, including retrieving and deleting malicious emails from user inboxes, implementing email blocks, conducting password resets, applying proxy blocks on malicious domains, isolating users and hosts, establishing remote shells, and coordinating host re-imaging.
• Stay current with evolving threats, emerging attack vectors, and security best practices while pursuing SANS cybersecurity certifications.
• Utilize Claude AI for investigations and to build skills that help with daily investigations and tasks.

System Admin/SOC Analyst - Living Word Christian Center - Forest Park

(2022-08 - 2024-11)

• Performing regular vulnerability assessments and penetration testing on internal and external systems, using Port53 Technologies, and remediating identified vulnerabilities in coordination with IT teams.
• Monitoring network traffic and security logs for unusual activities using Darktrace, and responding to alerts to prevent potential security breaches.
• Creating and implementing custom rules within Darktrace for tailored threat detection.
• Conducting security awareness training sessions for employees, educating them on best practices for password management, phishing detection, and safe internet usage to reduce the risk of human error.
• Configuring and managing Sophos Endpoint Protection solutions to protect endpoints from malware, ransomware, and other security threats.
• Implementing data loss prevention (DLP) solutions through Sophos to monitor and control the movement of sensitive data, preventing unauthorized access and exfiltration of critical information.
• Managing user accounts and permissions in Active Directory.
• Providing technical support to end-users via phone, email, or remote access.
• Configuring and managing firewalls and (IDS/IPS) to enforce security policies, monitor suspicious activities, and block unauthorized access attempts.
• Maintaining detailed documentation of security incidents, including timelines, actions taken, and outcomes, and generating regular reports for management on the organization's security posture.
• Working closely with IT teams to implement security controls, perform system hardening, and ensure secure configuration of servers, networks, and applications.
• Installing and configuring WAPS through Aruba.
• Upgrading Active Directory Windows Server 2012 to 2016.
• Pushing patches and Windows updates through KACE.

PC Support Technician - Rabana Consulting Inc - Mount Prospect

(2013-04 - 2016-07)

• Provide technical support to end-users via phone, email, and in person.
• Troubleshoot software and hardware issues, ensuring timely resolution.
• Install, configure, and maintain computer systems and peripherals.
• Assist with the setup and deployment of new equipment and software.
• Create and manage user accounts, passwords, and permissions.
• Document customer interactions and resolutions in a ticketing system.
• Collaborate with the IT team to resolve complex technical problems.
• Conduct user training and offer guidance on technology usage.

Bachelor's Degree - Cybersecurity & Information Assurance - Western Governors University (2019-02 - 2022-07)