Shane N. Jolly
Information Security Analyst, Electric utilities
Albuquerque, NM · (505) 555 0136 · name@example.com · linkedin.com/in/shanenjolly
Key Qualifications
EXPERIENCE
Seven years in information security across utilities and public research
INDUSTRIES
Electric utilities, federally funded research
SPECIALTIES
Security monitoring, vulnerability management, network segmentation, incident response
SYSTEMS
Splunk, CrowdStrike Falcon, Tenable Nessus, Microsoft Sentinel, ServiceNow
CREDENTIALS
Certified Information Systems Security Professional, Global Information Assurance Certification Certified Incident Handler
EDUCATION
Bachelor of Science in computer engineering, University of New Mexico
Executive Summary
Information security analyst at an electric cooperative, splitting the week between corporate monitoring and the very different rules that apply to control systems. Seven years in, most of them spent proving a fix works rather than announcing it. Certified Information Systems Security Professional since 2023.
Signature Achievements
- Reduced critical vulnerabilities older than 30 days on 1,800 corporate endpoints from 410 to 46 in nine months.
- Cut mean time to detect on the corporate network from 41 hours to 9 by rewriting eleven Splunk correlation searches.
- Ran the analysis on a confirmed credential theft incident and produced the timeline filed with the regulator.
- Mapped detection coverage against the MITRE adversarial tactics techniques and common knowledge framework and closed 14 gaps in two quarters.
- Documented segmentation between the corporate network and the control system network for the annual compliance review.
- Brought the false positive rate on the five busiest alert rules from 62 percent to 18 percent over a year of tuning.
Professional Experience
Information Security Analyst
Rio Abajo Electric Cooperative, Albuquerque, NM 2021 to present
One of five analysts protecting 1,800 endpoints, four substations and the corporate network for a cooperative serving 240,000 members.
- Monitors and tunes Splunk correlation searches and reports false positive rate to the security lead monthly.
- Runs the vulnerability management cycle in Tenable Nessus from scan schedule to remediation verification.
- Investigates endpoint detection and response alerts in CrowdStrike Falcon and escalates confirmed incidents.
- Reviews segmentation between corporate and control system networks with the operations technology engineers.
Security Analyst
Corrales Mesa Research Services, Albuquerque, NM 2019 to 2021
Contractor security team of nine supporting a federally funded research campus of 3,000 staff.
- Handled daily alert triage and wrote the shift summary for the incoming analyst.
- Ran authenticated scans and produced patch priority lists for system owners.
- Assisted control assessments against National Institute of Standards and Technology special publication 800 53.
Technology Support Specialist
Tijeras Canyon Community Health, Albuquerque, NM 2018 to 2019
Support desk for six clinics and 300 staff.
- Handled workstation and account support and learned the Health Insurance Portability and Accountability Act security rule on the job.
Licensure and Certification
Certified Information Systems Security Professional, 2023
Global Information Assurance Certification Certified Incident Handler, 2021
Education
Bachelor of Science in computer engineering, University of New Mexico, 2018
Core Skills
Security monitoring · Splunk tuning · Vulnerability management · Tenable Nessus · CrowdStrike Falcon · Incident investigation · Detection coverage mapping · Segmentation review · False positive reduction