Levy Martin Borromeo

Cyber Security Support Analyst with a strong background in vulnerability management, threat hunting, and incident response. Skilled in conducting vulnerability scans, performing risk prioritization, and implementing secure configurations. Proficient in developing custom detection rules in Microsoft Defender and creating Sentinel dashboards. Strong written and verbal communication skills, with the ability to translate technical information for clients.

• Cybersecurity: CompTIA CySA+, Security+, Network+, Security Analytics Professional (CSAP), ISC2 Certified in Cybersecurity (CC)
• Project Management and IT: PMP, PMI-ACP, CSM, PRINCE2 Practitioner, ITIL 4 Foundation

References available upon request.

Vulnerability Management, DISA STIG Implementation and Threat Hunting Projects

Source: github.com/levyborromeo

Platforms and Technology Used: Tenable, SIEM (Microsoft Sentinel), EDR (Defender for Endpoint), Azure VMs, KQL

• Cyber security
• Incident response

Threat hunting

• SIEM monitoring
• Endpoint detection and response
• Vulnerability management
• CVE/CWE analysis
• CVSS scoring
• OWASP Top 10
• Cyber Kill Chain
• MITRE ATT&CK Framework
• Firewall configuration
• PowerShell scripting
• BASH scripting
• Security operations
• Risk prioritisation
• NIST frameworks
• Problem solving
• Analytical thinking
• Communication
• Collaboration
• Adaptability
• Curiosity
• Investigative mindset
• Resilience
• Continuous learning
• Teamwork

• Datacom Cybersecurity Job Simulation on Forage - Completed a simulation focussed on how Datacom's cybersecurity team helps protect its clients. Investigated a cyberattack and produced a comprehensive report documenting findings and outlining key recommendations to improve a client's cybersecurity posture. Conducted a comprehensive risk assessment.
• AIG Shields Up: Cybersecurity virtual experience program on Forage - Completed a cybersecurity threat analysis simulation for the Cyber Defense Unit, staying updated on CISA publications. Researched and understood reported vulnerabilities, showcasing analytical skills in cybersecurity. Drafted a clear and concise email to guide teams on vulnerability remediation. Utilised Python skills to write a script for ethical hacking, avoiding ransom payments by bruteforcing decryption keys.
• Mastercard Cybersecurity virtual experience program on Forage - Completed a job simulation where I served as an analyst on Mastercard's Security Awareness Team. Helped identify and report security threats such as phishing. Analysed and identified which areas of the business needed more robust security training and implemented training courses and procedures for those teams.