Looking for a job

Lawrence Magama

@lawrencemagama

SOC Analyst at USAA who tunes Splunk detections and investigates threats across endpoint, network, identity, email, and DLP.

United States

Message

At USAA, I serve as a Splunk and Use Cases SME, developing and tuning security monitoring use cases and exclusions for known false positives. I investigate detections across endpoint, network, identity, email, and DLP telemetry, and support incident response from containment through recovery.

I also conduct threat hunts using indicators of compromise, OSINT, and MITRE ATT&CK, and maintain runbooks and playbooks for repeatable SOC processes. Previously, at Caliber Home Loans, I monitored SIEM and case-management platforms, supported incident response, and prepared incident reports.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Analyst I - SOC

Current

USAA

Aug 2019 - Present (7 years 2 months)

Serve as a Use Cases SME and Splunk SME, leading security investigations, detection initiatives, and continuous improvements to SOC monitoring and response processes. Monitor and correlate security telemetry across endpoint, network, identity, email, and DLP technologies to identify threats and indicators of compromise.

IT Support Analyst - Security & Infrastructure

Caliber Home Loans

Mar 2017 - Jul 2019 (2 years 4 months)

Monitored SIEM and case-management platforms for security alerts, performed security-alert triage and analysis, and supported incident response including containment, eradication, recovery, documentation, and remediation tracking. Conducted root-cause analysis and generated detailed incident reports.

SIEM Security Monitoring Alert Triage Incident Response Root Cause Analysis Incident Reporting Threat Intelligence Technical Troubleshooting