Open to opportunities

Joseph Fernandes

@josephfernandes

I’m a Senior Security Analyst focused on vulnerability management, incident response, and security awareness to strengthen organizations.

Zimbabwe

Message

What I'm looking for

I’m looking for a security-focused role with continuous professional development, where I can own vulnerability management and incident response, run phishing simulations, and collaborate cross-functionally to improve the organization’s security posture.

I bring results-driven experience in information security and IT support, and I’m at my best building secure processes that teams can consistently follow. At Smith’s News, I designed and implemented an enterprise information security framework and maintained secure configuration baselines across systems.

I manage the full vulnerability management lifecycle—identifying issues, prioritizing risk, driving timely remediation, and coordinating with patching to keep systems updated and compliant. I also facilitate pen-test activities, lead investigations using incident response procedures, and perform malware analysis.

I strengthen defense through active threat work and security culture—conducting threat hunting aligned with the MITRE ATT&CK framework, running phishing simulation campaigns, monitoring antivirus alerts, and handling suspicious phish reporting to SOC. I’ve contributed to large initiatives like the O365 project and helped achieve Cyber Essential Plus certification.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Analyst

Current

Smith's News

Aug 2021 - Present (4 years 8 months)

Designed and implemented an enterprise information security framework and maintained secure configuration baselines across systems. Owned vulnerability management, audits, malware analysis, and incident response, and played a key role in achieving Cyber Essential Plus certification.

Vulnerability Management Security Incident Response Threat Hunting Malware Analysis Change Management

Security Lead

Nationwide Building Society

Jan 2019 - Aug 2021 (2 years 7 months)

Led security assessments and vulnerability management using risk registers and dispensations. Provided security architecture-focused recommendations across operating systems, networks, and hardware, including managing change approvals and split passwords via CyberArk.

Security Architecture Risk Register Change Management Bug Bounty Programs

Desktop/Network Security Analyst

Innovate UK / UKRI

Nov 2014 - Jan 2019 (4 years 2 months)

Provided 2nd and 3rd line user and infrastructure support, monitoring network and server logs for security alerts. Managed antivirus checks, Windows updates, vulnerability assessments, phishing exercises, and temporarily managed a team of 5.

Security Monitoring Log Review Vulnerability Assessment SharePoint Administration IT Training

IT Support Engineer

Buro Happold

Sep 2014 - Oct 2014 (1 month)

Provided 2nd line IT support within service level agreements (SLAs), including imaging and deploying PCs. Deployed and imaged new and existing devices using SCCM.

SLA Management SCCM User Support

IT Service Desk Analyst

Great Western Hospital

Apr 2014 - May 2014 (1 month)

Provided 1st line IT support to users, including user management activities. Supported service operations and end-user requests under operational processes.

IT Service Desk Troubleshooting Access Management Documentation

IT Engineer

Stone King

Mar 2014 - Apr 2014 (1 month)

Provided 2nd line IT support covering software and hardware for users. Managed user-related support activities and resolved technical issues within service processes.

Software support Hardware Support Troubleshooting Access Management IT Support

Technology Administrator

Ernst & Young

Jul 2008 - Feb 2014 (5 years 7 months)

Provided 2nd and 3rd line infrastructure support and delivered IT training to new joiners and existing staff. Managed IT asset purchasing and inventory and maintained a test lab for application and security policy testing.

IT Training IT Asset Management Inventory Management Application Testing

Education

Degrees, certifications, and relevant coursework

University of Goa

Bachelor of Computer Applications (B.C.A), Software programming

2007 -

Activities and societies: Academic project: Data Entry and Stock Management Software using Visual Basic.

Bachelor of Computer Applications (B.C.A) from the University of Goa, majoring in software programming. Developed a data entry and stock management software project using Visual Basic.