Open to opportunities

Connor Andrews

@connorandrews

I strengthen security operations through vulnerability management, incident response, and identity and email protection.

United States

Message

What I'm looking for

I'm looking to continue strengthening security operations through vulnerability management, incident response, threat detection, and practical improvements to identity, email, and network security.

At Massachusetts Trial Court, I drive vulnerability patching through stakeholder education and investigate Risky User Alerts, Splunk Notables, and CrowdStrike detections to support incident response and containment.

I help deploy email and identity protection tools, strengthen firewall rules with Infrastructure, and maintain Tenable, CrowdStrike, Splunk, MFA, and SSO environments. I also lead security documentation, including operational procedures and contributions to the Incident Response Plan.

Previously at Cyvergance.AI, I evaluated NIST 800-53 and ISO 8001 controls and identified logging gaps for Infrastructure teams and the CTO. I also run a home data center with Bitwarden in Docker, ESXi, secure port forwarding, and certificate-based SSH.

Experience

Work history, roles, and key accomplishments

Current

Information Security Contractor

Current

Massachusetts Trial Court

Jun 2024 - Present (2 years 3 months)

Pushed for patching of critical vulnerabilities and acted as technical investigator for security alerts. Assisted in deployment of email and identity protection tools and led documentation efforts.

Tenable.Sc Splunk Crowdstrike Barracuda Email Gateway Barracuda Identity Protection KnowBe4 Defend KnowBe4 PhishER MFA SSO Firewall Rules Network Security

Tier 1 SOC Analyst

Cyvergance.AI Inc.

Mar 2023 - Sep 2023 (6 months)

Evaluated NIST 800-53 and ISO 8001 controls and made recommendations for compliance. Evaluated logging practices and identified information gaps for infrastructure teams.

NIST 800 53 ISO 8001 Logging Compliance Security Controls

Education

Degrees, certifications, and relevant coursework

Northeastern University

Master of Science, Cybersecurity

Pursuing a Master of Science in Cybersecurity with coursework in digital forensics, security of wireless and mobile systems, software vulnerabilities, and compilers.