Josh Guajardo

Cybersecurity Analyst with 10+ years of experience in threat detection, incident response, threat hunting, SIEM administration, and security operations. Experienced with CrowdStrike Falcon, Microsoft Defender, Uptycs, Magna, QRadar, Splunk, and McAfee SIEM. Proven ability to tune alerts, reduce false positives, investigate incidents, and support enterprise and government environments.

Lead Senior Security Analyst at IBM (2021 – Present)

• Perform threat detection and incident response using CrowdStrike Falcon and Microsoft Defender
• Conduct threat hunting and endpoint investigations through Uptycs and Magna platforms
• Tune security alerts and detection logic to improve SOC effectiveness
• Analyze security events and provide remediation recommendations
• Support government and enterprise cybersecurity operations

Senior Security Analyst at Texas Department of Information Resources (2018 – 2021)

• Investigated security alerts from FireEye, RSA NetWitness, and TippingPoint platforms
• Performed threat hunting and packet analysis to identify malicious activity
• Correlated security events across enterprise environments
• Escalated incidents and coordinated response efforts with state agencies
• Evaluated emerging security technologies through PoC testing

SIEM Security Analyst at Experis IT / CPS Energy (2017 – 2018)

• Monitored and analyzed security events supporting NERC CIP compliance
• Built and maintained Splunk dashboards, reports, and alerts
• Tuned SIEM detections to improve visibility and reduce false positives
• Investigated security events and documented remediation activities

SIEM Security Analyst at TCS / CNA Chicago (2016 – 2017)

• Supported migration from hosted SIEM to on-premises enterprise deployment
• Assisted in SIEM architecture across four global data centers
• Developed use cases, alerting logic, and security monitoring procedures
• Managed SOC operations and supported McAfee ePO and Nessus platforms

QRadar Administrator at Ntelicor / American Airlines (2015 – 2016)

• Served as QRadar SME supporting American Airlines security operations
• Developed custom log source extensions and integrations
• Built dashboards, reports, rules, and offense tuning strategies
• Supported incident response investigations and compliance initiatives
• Planned QRadar growth, upgrades, and enterprise integrations

QRadar Administrator at iGate (2014 – 2015)

• Administered enterprise QRadar and Splunk environments
• Managed log collection, retention, and event correlation
• Created SIEM alerts and detection rules
• Supported PCI compliance and user access administration

Master of Science in Network Security – University of Phoenix (2016 – 2016)