Tiffany C. Dry
Security Operations Center Analyst, Managed security services
Tampa, FL · (903) 555 0154 · name@example.com · linkedin.com/in/tiffanycdry
Key Qualifications
EXPERIENCE
Five years in security operations with managed service providers
INDUSTRIES
Managed security services, professional services, manufacturing clients
SPECIALTIES
Alert triage, escalation handling, rule tuning, client reporting
SYSTEMS
Splunk, CrowdStrike Falcon, Microsoft Sentinel, ServiceNow, Nessus
CREDENTIALS
Global Information Assurance Certification Security Essentials, Splunk Core Certified Power User
EDUCATION
Bachelor of Science in cybersecurity, University of South Florida
Executive Summary
Security operations center analyst at a managed provider covering 40 client environments, where every alert belongs to somebody else's business. Five years on the console working escalations, tuning noisy rules and writing the client notes that decide whether a customer renews.
Signature Achievements
- Handled 9,400 alerts in a year with escalation accuracy of 96 percent on quality review.
- Cut the false positive rate on the ten busiest client rules from 71 percent to 22 percent over two quarters.
- Brought mean time to detect across the client base from three hours to 38 minutes by rebuilding the priority queue.
- Caught a ransomware staging pattern on a manufacturing client at two in the morning and isolated 14 hosts before encryption started.
- Wrote the business email compromise triage playbook that all three shifts now follow.
- Kept a departing client by rewriting the monthly report into something their board could read.
Professional Experience
Security Operations Center Analyst
Hillsborough Managed Defense, Tampa, FL 2021 to present
One of eighteen analysts across three shifts monitoring 40 client environments and 46,000 endpoints.
- Triages alerts in Splunk and CrowdStrike Falcon across the client base and escalates confirmed incidents to the client contact.
- Tunes detection rules with the engineering team and tracks false positive rate by client.
- Runs containment actions including host isolation and account disable under agreed client authority.
- Writes incident notes and the monthly security report for eight assigned clients.
Security Analyst
Gulf Coast Network Services, Clearwater, FL 2020 to 2021
Support and security desk of nine serving small business clients across the Tampa Bay area.
- Monitored endpoint alerts and handled first response for client compromises.
- Ran vulnerability scans and produced client remediation reports.
- Covered after hours on call one week in three.
Licensure and Certification
Global Information Assurance Certification Security Essentials, 2023
Splunk Core Certified Power User, 2022
Education
Bachelor of Science in cybersecurity, University of South Florida, 2020
Core Skills
Alert triage · Splunk · CrowdStrike Falcon · Rule tuning · False positive reduction · Host isolation · Client reporting · Playbook development · On call response