Looking for a job

Deon White

@deonwhite

Senior incident response analyst at Leidos Inc. coordinating cyber incident investigations and turning threat findings into actionable recommendations.

United States

Message

At Leidos Inc., I coordinate detection, triage, containment, remediation, and reporting for cyber incidents affecting client and customer networks. I analyze SIEM queries and network and host telemetry, then translate findings into incident reports and executive briefings.

Previously, at Broadleaf Inc., I led a team of 15+ analysts in enterprise cyber defense operations. Across my incident response and threat hunting work, I developed detection rules and response guides, investigated network activity, and mentored analysts.

Experience

Work history, roles, and key accomplishments

Current

Senior Incident Response Analyst

Current

Leidos Inc.

Mar 2023 - Present (3 years 7 months)

Coordinate detection, triage, containment, remediation, and reporting for cyber incidents affecting client and customer networks. Lead incident response activities with SOC personnel and analyze SIEM queries, network telemetry, and raw security data to investigate suspected intrusions.

Incident Response SOC Operations SIEM Analytics Threat Hunting MITRE ATT&CK Splunk ArcSight SIEM Wireshark Endpoint Security Digital Forensics Executive Reporting Mentorship

Cyber Defense Operations Lead

Broadleaf Inc.

Jul 2021 - Aug 2022 (1 year 1 month)

Led a team of 15+ analysts defending an enterprise network through proactive threat detection and reactive incident response. Correlated threat intelligence and attack-sensing data to identify advanced threats and developed detection rules and procedures.

Threat Intelligence IDS IPS Tuning Splunk Forescout Encase Cloud Browser Isolation SOC Leadership Incident Response Red Team Blue Team Exercises

Threat Hunt / Incident Response Lead

ICS-NETT

Aug 2020 - Jul 2021 (11 months)

Conducted full packet-capture and network traffic analysis to identify unauthorized activity and potential compromise. Investigated network sensor findings, assessed vulnerabilities, and created incident-specific SOPs and response guides.

Packet Analysis Network Traffic Analysis Vulnerability Assessment Incident Response SOP Development Training Data Spillage Resolution

Senior Analyst

Insight Global

Jul 2019 - Jul 2020 (1 year)

Assessed information assurance requirements and helped develop and implement enterprise security standards and procedures. Performed vulnerability and risk analysis of systems and applications across the system development life cycle.

Information Assurance Vulnerability Analysis Risk Analysis Security Standards Technical guidance Training

Incident Handling Branch Watch Officer

Digital Consultants

Sep 2017 - Jul 2019 (1 year 10 months)

Managed incident-handling watch-floor operations, ArcSight case queues, Remedy queues, and investigation assignments. Coordinated with security teams and developed SOPs and workflow diagrams to standardize incident handling.

Incident Handling ArcSight Remedy Tanium SOP Development Metrics Reporting Shift Handoff Situational Awareness