Open to opportunities

Hien Nguyen

@hiennguyen2

Message

Senior Cyber Security professional specializing in SOC operations, incident response, and threat hunting.

United States

Message

What I'm looking for

I seek a hands-on security role in a collaborative 24×7 SOC or security team where I can lead incident response, improve detections, mentor analysts, and drive measurable reductions in risk.

I am a senior cyber security professional with over 10 years of experience leading 24×7 SOC operations, incident response, and proactive threat hunting across enterprise environments.

I have deep hands-on experience triaging alerts and containing advanced threats using EDR, SIEM, NDR, SOAR, and email security platforms, and I’ve tuned detection rules to reduce false positives while improving analyst efficiency.

I mentor and guide junior analysts, develop runbooks and playbooks, collaborate with CTI and engineering teams, and deliver clear incident reports and executive briefings to drive continuous security improvements.

Experience

Work history, roles, and key accomplishments

Current

Senior SOC Analyst

Current

Microsoft

Apr 2023 - Present (2 years 11 months)

Manage 24×7 SOC escalations, triage alerts across CrowdStrike, QRadar, SOAR and Microsoft Defender, and coordinate containment and incident response, improving detection fidelity and analyst efficiency.

Incident Response Threat Hunting Crowdstrike QRadar SOAR Microsoft Defender Detection Tuning

Incident Response Analyst

DTCC

May 2017 - Mar 2023 (5 years 10 months)

Investigated and responded to security incidents in a 24×7 SOC for financial systems using CrowdStrike, Splunk and Palo Alto, led phishing and eDiscovery investigations and produced threat trend briefings to management.

Crowdstrike Splunk ProofPoint Phishing eDiscovery IOC Analysis SIEM

DFIR Analyst

Feb 2016 - May 2017 (1 year 3 months)

Performed digital forensics and incident response for banking clients, conducted proactive threat hunting with Splunk and FireEye, and delivered root-cause analyses and remediation guidance.

Digital Forensics Splunk Forensic Analysis Threat Hunting SIEM Tuning

Cyber Security Analyst

Wipro Limited

Jun 2014 - Feb 2016 (1 year 8 months)

Monitored high-volume 24/7 SOC environments for Fortune 500 financial clients, investigated alerts from Splunk, FireEye and Carbon Black, and developed Splunk hunts and detection rules.

Splunk Carbon Black Threat Hunting Detection Engineering SIEM OSINT Incident Management

IT Network Security Analyst

GT Advanced Technologies

Mar 2011 - Jun 2014 (3 years 3 months)

Supported deployment and monitoring of QRadar SIEM, RSA DLP and IDS/IPS, conducted vulnerability scans and maintained incident response playbooks and SecurID provisioning processes.

QRadar RSA DLP IDS SIEM RSA SecurID Endpoint Security