Open to opportunities

Emmanuel Amoah

@emmanuelamoah

Message

Experienced cyber defense analyst specializing in insider threat detection and incident response.

Zimbabwe

Message

What I'm looking for

I am seeking a role where I can lead insider threat detection and incident response efforts, work with cross-functional teams, apply AI/ML to improve detections, and contribute to a security-first, collaborative culture.

I am a cyber defense analyst with 6+ years of experience specializing in insider threat detection, threat hunting, and incident response. I focus on safeguarding enterprise assets by implementing advanced detection and mitigation strategies.

I have operational experience with SIEMs (Microsoft Sentinel, Splunk), UEBA, EDR (CrowdStrike), DLP, and email security platforms such as Proofpoint and Microsoft Defender. I apply AI/ML-driven analytics to refine detection, tune correlation rules, and reduce false positives.

In prior roles I developed technical documentation, authored security advisories for leadership, led tabletop exercises, and conducted forensic investigations while maintaining chain of custody. I have implemented Zero Trust principles, performed penetration testing, and created SIEM alerts and dashboards to improve SOC response time.

I collaborate closely with cross-functional teams (Legal, HR, Insider Threat Program Managers) to investigate incidents and reduce insider data leak risk. I am committed to continuous improvement of security posture through automation, training, and pragmatic, compliance-aware controls.

Experience

Work history, roles, and key accomplishments

Current

Cyber Defense Analyst

Current

Ascendion

Sep 2022 - Present (3 years)

Performed incident response and threat hunting to detect and mitigate APTs and insider threats, implemented custom Sentinel correlation rules and UEBA models, and produced technical advisories for leadership.

Threat Hunting UEBA ProofPoint Crowdstrike SIEM Incident Response

Cyber Defense Analyst

Leidos

Feb 2022 - Aug 2024 (2 years 6 months)

Monitored and investigated alerts using Splunk and EDR, applied AI/ML to improve detection, conducted forensic investigations and developed SIEM alerts and automation to improve incident response.

Splunk EDR AI ML Forensics SIEM Tuning Python PowerShell Threat Hunting Incident Response

Cyber Threat Analyst

Elite Technical

Feb 2021 - Jan 2022 (11 months)

Built and operated an insider threat program using UEBA and DLP, improving detection accuracy by 35% and reducing insider data leak risk by 40% through behavioral analytics and cross-functional investigations.

UEBA Symantec DLP Splunk Digital Forensics

SOC Analyst

Cincinnati Financial Corporation

Jun 2016 - Jan 2021 (4 years 7 months)

Monitored and investigated SIEM alerts, tuned detection rules in Splunk, managed email threat vectors and deployed Sentinel agents to strengthen endpoint and cloud defenses.

Splunk Microsoft Defender Email Security SIEM Endpoint Protection Incident Response