Hadje Haoua Djamon

A Cyber Security Analyst

Talent

Reston, VAMember since October 17, 2026

Risk Management FrameworkSecurity Operation CenterSIEM (Splunk)malware analysisFireEye NXCisco SourcefireSplunk Enterprise (Search & Reporting)CofenseIronPortMicrosoft DefenderFireEye HXMcAfee AntivirusSplunk Enterprise SecurityNessusWebInspectNIST 800-137 Rev 1Open-Source toolsIDS/IPSDLP monitoring and loggingThreat Intelligence AnalysisIncident responseSecurity control assessments

Hire this person

Send a job offer directly to this candidate

Risk Management FrameworkSecurity Operation CenterSIEM (Splunk)malware analysisFireEye NX

About

A Cyber Security Analyst with 8 years of diversified experience in cyber security, information security, and IT operations. Skilled in Risk Management Framework and Security Operation Center with a deep understanding in monitoring and analyzing of security events to determine intrusion and malicious events.

Experience in investigating malicious domains, IPs, and phishing emails using Open-Source tools and recommend appropriate remediation steps. Specialized in proactive network monitoring of SIEM (Splunk). Ability to perform malware analysis with the overall objective to ensure confidentiality, integrity and availability of the systems, networks, and data.

Experience

Security Operational Center Analyst - Delviom/STOPSO - Bethesda, MD

(2022 - 2025)

Client: DHS

Review and analyse security event alerts and identify IOCs at the level of the network, application, and endpoint to determine if they are false or true positives.
Process daily threat Intel and blocking malicious MD5 hashes, IP’s and Domains following standard operating procedure.
Investigate, analyse, process, and resolve network security event alerts using SIEM tools; FireEye NX, Cisco Sourcefire and Splunk Enterprise (Search & Reporting).
Investigate, analyse, process, and resolve phishing email alerts using various tools; Cofense, IronPort and Microsoft Defender.
Investigate, analyse, process, and resolve endpoint security event alerts using SIEM tools; FireEye HX, McAfee Antivirus, and Splunk Enterprise Security
Actively take part in incident response to endpoint compromise such as host triage, dynamic malware analysis, remote system analysis, end-user interviews, and remediation efforts.
Analyse log data (firewall, network flows, IDS, IPS, System logs) to perform root cause of security incidents to include all stages of the cyber kill chain as appropriate.
Follow, create, and update changes to SOPs and other similar documentation.

CYBER SECURITY OPERATIONS ANALYST - Deloitte & Touche LLP - Rosslyn, VA

(2020 - 2022)

Client: Department of Justice

Work in a 24x7 Security Operations Center environment.
Analysing/Monitoring Security Information and Event Management (SIEM) using a variety of tools to investigate incidents, determine true threats, and provide solutions to detected issues in a timely manner.
Performing proactive Threat Intelligence Analysis using Open-Source tools
Document incidents to contribute to incident response and disaster recovery plans.
Assisted with critical, high, medium, and low findings, remediation, and review of events as part of the Incident Response Team.
Created reports of findings and remediation as needed to senior management.
Experience and skills in continuous monitoring, information security alerting, security event triage, intrusion analysis, threat trends, malware, and anomalous behaviour
Handles all end users, report Incidents, problem ticketing and change management ticketing with respect to Network Security within the agreed SLA.
Investigated malicious phishing emails, domains and IPs using Open-Source tools and recommended proper blocking based on analysis.
Participated and led SOC working groups. Collaborate across organizational lines and develop depth in your desired cyber discipline and/or technologies.
Tracked and updated incidents and requests based on client s updates and analysis results.

SECURITY OPERATIONS ANALYST - Full Circle Solutions Inc. - Maryland

(2019 - 2020)

Client: City of Baltimore

Performed network and host DLP monitoring and logging.
Regularly check work queue for incoming assignments and complete all work daily.
Monitored and analyzed network traffic and IDS/IPS alerts, investigating intrusion attempts and performing in-depth analysis of exploits and attacks.
Investigated malicious phishing emails, domains and IPs using Open-Source tools and recommended proper blocking based on analysis.
Identified suspicious/malicious activities or codes.
Searched firewall, email, web, or DNS logs to identify and mitigate intrusion attempts.
Conducted proactive monitoring, investigation, and mitigation of security incidents.
Acted as main investigators for potential incidents identified by Tier 1 or 2 analysts as well as any high visibility issues.
Continuous monitoring and interpretation of threats using the IDS and SIEM
Performed real-time monitoring, security incident handling, investigation, analysis, reporting, and escalations of security events from multiple log sources.
Monitored and analyzed security events to determine intrusion and malicious events.
Searched firewall, email, web or DNS logs to identify and mitigate intrusion attempts.

Security Control Assessor - United State Army - Fort Jackson, SC

(2014 - 2019)

Performed security control assessments for all the control families.
Reviewing Privacy Impact Assessment (PIA) documents after a positive PTA is created and ensuring that PII findings are recorded in the System of Record Notice (SORN)
Performing ongoing continuous monitoring using NIST 800-137 Rev 1 as a guide.
Review Reports from scans using vulnerability scanning tools such as Nessus and WebInspect
Created and finalized Security Assessment Report (SAR) and give recommendations to ISSO on how to mitigate or remediate reported weaknesses and vulnerabilities.