Open to opportunities

Maurice Shorter

@mauriceshorter

Message

Senior incident-response and security operations analyst who automates detection and remediation.

Zimbabwe

Message

What I'm looking for

I’m looking for a security role where I can lead incident response and security operations with automation—building SOAR workflows, threat-informed detections, and vulnerability programs that improve containment and remediation speed while meeting compliance goals.

I specialize in fortifying organizational security through intelligent automation and rapid incident response, especially in high-stakes healthcare and defense environments. I translate complex threat data into actionable strategies that reduce alert fatigue, streamline operations, and improve outcomes during breach mitigation while maintaining HIPAA compliance.

In my role as a Senior CIRT Analyst, I integrate threat intelligence with forensic analysis, engineer intelligence-driven detection rules using MITRE mapping, and lead post-incident root cause analysis and workshops. I also improve response speed by initiating automated SOAR workflow enhancements, and I drive risk-based prioritization with intel feeds and internal data so leadership can allocate budgets to reduce exposure to high-impact campaigns.

Experience

Work history, roles, and key accomplishments

Current

Senior CIRT Analyst

Current

Banner Health

Mar 2025 - Present (1 year 3 months)

Conducted incident response for critical healthcare security events by integrating threat intelligence with forensic analysis across EHR endpoints, reducing mean time to containment while supporting HIPAA-compliant breach mitigation. Engineered MITRE-mapped detection rules for healthcare TTPs and led post-incident root cause analysis plus SOAR workflow improvements to accelerate future response.

Incident Response Threat Intelligence Forensic Analysis Exposure Management

Senior Vulnerability Management Analyst

Banner Health

Apr 2022 - Mar 2025 (2 years 11 months)

Orchestrated a threat-informed vulnerability management lifecycle across state-regulated facilities by mapping CVEs to adversary TTPs, reducing critical exposure gaps for medical devices (IoMT) and maintaining compliance. Built automated risk-prioritization workflows that cut mean time to remediation by prioritizing assets with immediate ransomware risk to Electronic Health Records.

Vulnerability Management CVE Mapping Prioritization Patch Management Medical Device (IoMT) Security

Security Operations Analyst

Harris Health Systems

May 2021 - Apr 2022 (11 months)

Engineered Python-based automation workflows within SOAR to reduce analyst workload and improve rapid response to SIEM-generated offenses across critical systems. Authored healthcare threat intelligence flash reports, optimized EDR ransomware policies for HIPAA-regulated endpoints, and coordinated remediation planning with IT/network teams to strengthen PHI network segmentation.

Python SOAR Threat Intelligence EDR Policy Tuning Ransomware Segmentation Exposure Management

Versatile Technologist

Boeing

Jul 2016 - May 2021 (4 years 10 months)

Led technical debt reduction and secure development lifecycle improvements by building golden image configuration baselines to remediate misconfigurations and common risks across enterprise applications and servers. Conducted secure code reviews with unit testing and static/dynamic analysis to remediate critical Veracode vulnerabilities while improving compliance posture aligned to PCI, SCAP, and

Configuration Management Golden Image Baselines PCI Compliance SCAP ISO Compliance Secure Code Review Standards Static Analysis Unit Testing