
Lance A.
Cyber Security Analyst
Skills

Bekijk mijn diensten

Portfolio
Werkervaring
Cyber Threat Intelligence Analyst
CyberSOC Africa • Fulltime
May 2025 - Present • 1 yr 5 mos
• I Run VAPT engagements against client web applications; recent work identified BOLA/IDOR, stored XSS, CORS misconfigurations, and session invalidation issues, reported with CVSS scoring and evidence-backed findings. • I Write branded CTI flash reports on CVEs and threat actor activity relevant to the African financial sector, including ransomware campaigns and XSS-to-RCE vulnerability chains. • I Investigated a deepfake-driven investment fraud campaign impersonating a financial-sector executive; produced the CTI writeup and coordinated regulatory and platform abuse reporting. • I Built a Python IOC processing pipeline that normalizes and enriches malware indicators via the Virus total API, with hash-based deduplication and rate-limit handling across multiple campaigns. • I Perform SIEM-based root cause analysis (Microsoft Sentinel) across O365, Active Directory, and Firepower logs to scope and close out security incidents. • Track and correlate emerging threats using SOC Radar and Recorded Future to inform security strategies. • I Supported a client compliance review, performing checklist-based gap analysis against an industry security standard and producing supporting documentation.