Looking for a job

Alexander Adjei-Quaye

@alexanderadjei-quaye

SOC 3 Analyst at Western Governors University investigating incidents across 500–800 endpoints and reducing detection false positives by approximately 30%.

United States

Message

At Western Governors University, I investigate security incidents from detection and triage through containment, remediation, recovery validation, and closure. I manage Carbon Black Cloud operations across approximately 500–800 endpoints and reduced detection false positives by approximately 30% while maintaining actionable coverage.

I conduct MITRE ATT&CK-based threat hunts and APT profiling, and correlate endpoint, identity, network, email, and SIEM telemetry to reconstruct attack activity. I also led a cross-team red/blue exercise simulating an APT attack.

At Amazon, I investigated security events across network, host, and application logs and performed packet-level analysis using Wireshark. At Facebook, I investigated phishing, malware, and unauthorized access incidents and supported security audits against ISO 27001, NIST, and PCI frameworks.

Experience

Work history, roles, and key accomplishments

Current

IT Security Analyst II

Current

Western Governors University

Dec 2021 - Present (4 years 11 months)

Serve as a primary investigator for security incidents, driving investigations from detection and triage through containment, remediation, recovery validation, and closure. Manage Carbon Black Cloud EDR operations across approximately 500–800 endpoints, including policy administration, prevention rule development, and endpoint investigation.

Carbon Black EDR Incident Response Threat Hunting MITRE ATT&CK Devo SIEM Microsoft Defender For Endpoint Entra ID Azure Elastic Cisco Umbrella Zscaler IOC Enrichment Virus Total IPinfo Recorded Future Playbook Development Mentorship

SOC Analyst, Enterprise Protection Program

Amazon GSOC, Amazon Dev Center U.S., Inc.

Sep 2019 - Nov 2021 (2 years 2 months)

Monitored and investigated security events across network, host, and application logs using SIEM and IDS technologies to identify anomalous and potentially malicious activity. Correlated SIEM, IDS, endpoint, and network telemetry to identify attack patterns and potential root cause.

SIEM IDS Wireshark Network Security Incident Response Vulnerability Management Technical Reporting

Information Security Analyst

Facebook

Jul 2018 - Aug 2019 (1 year 1 month)

Investigated phishing, malware, and unauthorized access incidents, analyzing attack vectors, affected users, indicators of compromise, and potential organizational impact. Supported escalation, containment, remediation, and vulnerability management activities in collaboration with IT and security teams.

Phishing Analysis Malware Analysis Incident Response Vulnerability Management Security Metrics ISO 27001 NIST PCI DSS