Open to opportunities

Federico Levy

@federicolevy

Message

Cybersecurity professional with SOC/NOC expertise to detect, triage, and remediate threats.

United States

Message

What I'm looking for

I want to apply my SOC/NOC and TS/SCI experience to protect networks, lead incident triage, and keep improving detections through SIEM tuning, investigation quality, and mentorship.

I’m a U.S. Air Force Veteran trained in DCITA ICC Cyber Security, Network Analysis, Administration and Maintenance. I’ve operated in NOC and SOC environments and hold TS/SCI clearance to support security monitoring, incident response, and mission protection. I’m committed to honoring that training through dependable, high-integrity security work.

For the past several years, I’ve protected government, education, and enterprise networks using tools like Microsoft Sentinel, SentinelOne, ArcSight, and Devo to validate IOCs, investigate intrusion attempts, and improve resolution efficiency. As a Tier 2 Analyst, I held escalation authority, coordinated with SIEM engineers to tune alert logic, and mentored junior analysts across 200+ customer networks. I also supported MDR workflows and ensured timely communication during incident handling.

My background also includes strong network defense and compliance experience, including maintaining mission-critical infrastructure for 3,000+ circuits tied to the U.S. Missile Defense System. I’ve applied NIST CSF 800-53 to help determine security standards (including NOAA-related work) and performed forensic and threat analysis using StealthWatch and FireEye, alongside OSINT enrichment for investigation depth. I now seek to utilize my cybersecurity training and experience to strengthen organizations’ security posture while continuously improving detection and response.

Experience

Work history, roles, and key accomplishments

Current

Network Administrator

Current

Sitting Pretty Upholstery

Aug 2025 - Present (11 months)

Modernized recordkeeping by converting documents to electronic formats and maintaining up-to-date data integrity. Set up cloud storage and backups for documentation, and performed device maintenance, troubleshooting, and software updates.

Microsoft Office Excel Word Record keeping Data Integrity Cloud Storage Troubleshooting Data Loss Prevention

Tier 2 SOC Analyst

Pinnacle/AT&T

Jan 2025 - Aug 2025 (7 months)

Monitored SentinelOne and Microsoft Sentinel SIEM/SOAR activity and used Devo for log queries and raw data analysis. Validated IOCs, investigated intrusion attempts, and supported incident resolution across 200+ government and education customers.

SentinelOne SIEM SOAR EDR Logs IOC Validation remediation OSINT

Security Analyst

KPMG

Aug 2022 - Jan 2025 (2 years 5 months)

Monitored SentinelOne and Microsoft Sentinel activity across client networks with final decision authority for escalations outside the SOC. Mentored SOC L1 staff and performed in-depth IOC validation, intrusion investigations, and correlation of alerts and forensic artifacts.

SentinelOne IOC Validation Network Traffic Correlation Forensic Analysis Mentor

SOC Analyst

TekSystems/Leidos

Jul 2020 - Aug 2022 (2 years 1 month)

Monitored ArcSight SIEM and XSOAR event activity to detect threats on the NOAA network and assessed compliance using NIST CSF 800-53. Analyzed IP traffic with StealthWatch and FireEye, maintained shift logs, created ServiceNow tickets for escalation, and performed triage using PassiveTotal, Shodan, and OSINT.

ArcSight XSOAR NIST 800 53 StealthWatch FireEye SharePoint ServiceNow Shodan OSINT Ticketing

Network Analyst & Administrator

United States Air Force

Apr 2016 - Apr 2020 (4 years)

Maintained mission-critical systems and records for the U.S. Missile Defense System, ensuring accountability for 3,000+ circuits. Coordinated to diagnose outages, communicated technical status to command staff, and ensured equipment met accepted commercial installation specifications.

Solarwinds Remedy Systems Administration Technical Reporting