David Sandor

Background

About David Sandor

Organizational skills: ability to work independently without monitoring; remote work capability; decision-making; time management; self-management; self-motivation; active listening; empathy; skilled in multitasking; problem-solving; confidence; teamwork; calm & collaborative; fast learning new technologies; Communication and interpersonal skills: team spirit; increased adaptability; communication; seriousness; ability to assimilate new information and skills; ability to coordinate the team; developing use-cases/procedures and reports according to the customer needs; evaluating Cybersecurity Technologies and integrating them into the Incident Response Process; trained the analysts on how to use multiple Cybersecurity Technologies and how to react to different scenarios in the customer network; The main activities and responsibilities: Monitoring security alerts and taking response actions; Isolating endpoints/systems; Blocking email traffic; Blocking network traffic; Changing user's passwords; Expire O365 sessions; Investigation of logs, correlation of data, and analysis; Documenting all activities during an incident and providing details of it; Compliance with SLA agreements; Providing answers to calls and emails received from technical customers; Creating tickets for all assigned tasks and addressing customer requests and issues; Tracking tickets from opening to closing; Elaborating and maintain procedures, documentation, workflows, and the ability to train new analysts; Developing use-cases/procedures according to the customer needs; Evaluating Cybersecurity Technologies and integrating them into the Incident Response Process; Trained the analysts on how to use multiple Cybersecurity Technologies and how to react to different scenarios in the customer network; Monitoring and response skills in the following security tools: Carbon Black Cloud; Carbon Black Response; Carbon Black Protection; CrowdStrike; Office 365 Security & Compliance (OATP); Microsoft Cloud App Security (MCAS); Microsoft Defender Advanced Threat Protection (MDATP); Microsoft Defender for Identity; Microsoft Defender for Cloud; Microsoft Compliance Center; Microsoft Azure AD Identity Protection; Microsoft Azure Active Directory; Exabeam Advanced Analytics (UEBA); Exabeam Datalake; Cisco Umbrella; Symantec Cloud Email Security Filter; Minemeld; AD Manager; Trend Micro Deep Security; Proofpoint Email Security; Proofpoint TAP; Proofpoint TRAP; Proofpoint Admin (only Smart Search); QRadar; Recorded Future; Mandiant; Swimlane (SOAR); Ticketing systems used: Helpdesk; Service Now; Jira;