Network Doctor | Englewood, NJ |CyberSecurity Engineer     Oct. 2025 – Present

​​​

​

• Investigate and resolve approximately 35 security alerts and incidents daily across an MSP portfolio of 184 organizations and 12,000 endpoints, regarding phishing, endpoint detection, identity, malware, phishing, and account-compromise detections through containment, remediation, and escalation.

• Secure identity and access across approximately 80 Microsoft 365 tenants using Entra ID, Conditional Access, Defender, Intune, Exchange Online, and Purview, mitigating risky sign-ins, enforcing MFA, and resolving access-control conflicts.

• Analyze and remediate EDR/MDR threats across 100+ client environments using SentinelOne, Microsoft Defender, Huntress, and Blackpoint, distinguishing malicious activity from false positives and analyze and take additional action to high-priority threats within 5–10 minutes.

• Support client SOC 2 readiness and audit preparation through security-control remediation, documentation, evidence collection, and coordination across security, engineering, Helpdesk, and client stakeholders

• Investigate and neutralize approximately 10 phishing incidents daily using Mimecast and MX ToolBox, analyzing message headers, URLs, attachments, authentication results, message traces, and sandbox findings to identify credential theft and malicious payloads. Along with using Phin for monitoring and enrolling users for phin simulation campaigns.

• Contained a phishing-driven account and endpoint compromise involving malicious PowerShell-delivered RMM software by isolating the affected system, disabling the account, revoking sessions, resetting credentials, auditing MFA and mailbox activity, blocking malicious infrastructure, and coordinating secure device reimaging.

• Accelerated ransomware recovery for a 300-user environment by securing approximately 100 endpoints, reimaging compromised systems, restoring backups, reconnecting Active Directory devices, and implementing post-incident security hardening before production restoration.

• Implement and improve security procedures across client environments, including Conditional Access, travel-access controls, EDR exclusions, malicious hash and URL blocking, account containment, endpoint isolation, and post-incident remediation while coordinating with clients, engineers, Helpdesk, and MDR/SOC teams.