Looking for a job

Colby Cliffe

@colbycliffe

Cybersecurity Analyst at Kaspar Companies who built an internal security operations platform for detection triage, investigations, and asset visibility.

United States

Message

What I'm looking for

I’m most interested in ambiguous investigations that require correlating evidence across systems, testing explanations, determining root cause, and separating what can be proven from what remains unknown.

At Kaspar Companies, I built the security program from the ground up, including its incident response plan, detection triage process, and asset visibility. I deployed CrowdStrike Falcon across the endpoint fleet and investigate threats across endpoint, identity, email, network, cloud, and application systems.

I designed and operate an internal security operations platform that brings together CrowdStrike Falcon, Microsoft 365 / Entra ID, UniFi, and Jira. I’m most interested in ambiguous investigations that require correlating evidence across systems, testing explanations, finding root cause, and separating what can be proven from what remains unknown.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Analyst

Current

Kaspar Companies

Jun 2025 - Present (1 year 5 months)

Responsible for security across ~300 endpoints and multiple manufacturing subsidiaries, building the security program from the ground up. Deployed CrowdStrike Falcon fleet-wide and investigates phishing, BEC, account compromise, and unusual endpoint behavior.

CrowdStrike Falcon Cloud Security Microsoft 365 Entra ID Exchange Online Incident Response Threat Hunting PowerShell Python Microsoft Graph REST APIs

IT Operations Analyst

Kaspar Companies

Oct 2023 - Jun 2025 (1 year 8 months)

Worked in a small IT team supporting infrastructure, users, networks, production systems, and security across multiple manufacturing companies. Served as primary internal investigator during an Akira ransomware incident, leading to a dedicated security role.