Devon Chen

Information Security Analyst

Atlanta, GA

devon.chen@email.com

(555) 019-7382

linkedin.com/in/devonchen-infosec

github.com/devonchen-sec

Skills

Security Operations & SIEM

hreat Detection, EDR & SOAR

Vulnerability Management

Frameworks & Compliance

Network & Cloud Security

Scripting & Security Tooling

Certifications

Certified Information Systems Security Professional (CISSP)

Jan, 2024

(ISC)²

Certified Ethical Hacker (CEH)

Jan, 2022

EC-Council

CompTIA Security+ (SY0-601)

Jan, 2020

CompTIA

Education

Bachelor of Science in Cybersecurity & Information Assurance

Jan 2015 - Dec 2019

Georgia Institute of Technology

Summary

Defensive Information Security Analyst with 6+ years of experience protecting enterprise environments through threat detection, vulnerability management, incident response, and security governance. Expert in triaging SIEM alerts, automating SOAR playbooks, hardening cloud workloads (AWS/Azure), and conducting risk assessments against NIST CSF, ISO 27001, and SOC 2 frameworks. Proven track record of reducing Mean Time to Detect (MTTD) by 45%, lowering alert false positives by 60%, and leading incident containment across zero-day vulnerabilities with zero data exfiltration.

Work experience

Senior Information Security Analyst

Jun 2022 - Present

IronClad Defense Systems

Location: Atlanta, GA

Spearhead threat monitoring, detection engineering, and incident containment across a hybrid infrastructure of 4,500+ endpoints and multi-cloud accounts (AWS & Azure). Engineered 40+ custom Splunk and Sentinel detection rules mapped to MITRE ATT&CK tactics, uncovering sophisticated persistent threat techniques and lowering false-positive noise by 60%. Designed automated SOAR playbooks in Cortex XSOAR for phishing triage and compromised identity isolation, cutting Mean Time to Remediate (MTTR) from 45 minutes to 7 minutes. Governed enterprise-wide vulnerability scans using Tenable Nessus, collaborating with system administrators to patch 1,200+ high and critical CVEs within strict 14-day SLA windows. Led the incident response team during an industry-wide zero-day vulnerability outbreak; executed threat hunting queries, applied IOC blocklists, and secured all public-facing services with zero breach occurrences. Facilitated annual SOC 2 Type II and ISO 27001 audit workflows, collecting technical evidence and ensuring 100% control compliance across all tested operational domains.

Information Security Analyst

Jul 2019 - May 2022

Apex Financial Technologies

Location: Charlotte, NC

Served as Tier 2 SOC Analyst, handling real-time escalation, log analysis, and containment for an enterprise processing 12M+ daily financial transactions. Investigated malware alerts, credential harvesting attempts, and anomalous network traffic using CrowdStrike Falcon and Zeek network telemetry. Performed deep-dive packet inspection and forensic artifact analysis on compromised endpoints, identifying persistence mechanisms and unauthorized outbound egress. Developed and automated Python and PowerShell scripts to query threat intelligence feeds (VirusTotal, AlienVault OTX) and enrich inbound alert context. Conducted quarterly phishing simulations and technical security awareness campaigns for 2,000+ employees, dropping organizational click rates from 18% to under 3.5%. Partnered with the DevOps engineering team to implement container image scanning in CI/CD pipelines, mitigating critical misconfigurations prior to production deployment.

Projects

Enterprise Identity & Access Management (IAM) Hardening

Jan 2023 - Dec 2023

Role: Security Analyst

Conducted an extensive privilege audit across Active Directory and AWS IAM, deprecating dormant service accounts and enforcing least-privilege role boundaries for 800+ technical users. Integrated conditional access policies and mandatory hardware-token MFA, eliminating password-spraying and session hijacking vulnerabilities.