Open to opportunities

Maxine Jones

@maxinejones

Message

Entry-level IT audit professional skilled in vulnerability management and compliance frameworks.

United States

Message

What I'm looking for

I seek a hands-on security or IT audit role where I can apply vulnerability management, GRC design, and detection engineering to improve controls and compliance.

I am an entry-level IT audit and security professional with hands-on experience in vulnerability management, control testing, and compliance frameworks such as NIST 800-53, NIST CSF, ISO 27001, PCI-DSS, and HIPAA. I combine technical security operations with audit-oriented risk assessment to identify control gaps and drive remediation.

In internships and projects I performed vulnerability assessments with Qualys and Burp Suite, improved detection and reduced false positives, and documented remediation actions to accelerate compliance. I designed an enterprise GRC program, conducted end-to-end risk assessments, and produced an 18-month roadmap to strengthen governance and continuous monitoring.

I also built a machine-learning intrusion detection system integrating honeypot telemetry and CIC-IDS datasets with 99%+ detection accuracy, deployed on AWS EC2 and integrated with Splunk for threat visualization; I communicate findings clearly and work independently to deliver measurable security improvements.

Experience

Work history, roles, and key accomplishments

High School Hackathon Organizer

Chicago State University

Jan 2025 - Apr 2025 (3 months)

Coordinated logistics for a multi-school cybersecurity hackathon serving 100+ participants and maintained strict data privacy controls, resulting in zero data breaches. Managed participant information and compliance processes throughout the event.

Event Coordination Data Privacy Compliance Logistics

Jr. System Engineer Intern

United Airlines

May 2024 - Aug 2024 (3 months)

Performed vulnerability assessments using Qualys and Burp Suite, documented findings and remediation steps, and managed corrective action tracking, resulting in faster issue resolution and improved compliance. Analyzed system configurations to reduce false positives by 20% and accelerate threat detection by 30%.

Vulnerability Management Qualys Burp suite Threat Detection

Intrusion Detection Developer

Personal Project

Designed and implemented a hybrid ML-based intrusion detection system combining honeypot telemetry with CIC-IDS data, achieving 99%+ detection accuracy and mapping detections to MITRE ATT&CK for prioritization. Deployed T-Pot on AWS EC2 and integrated logging and visualization via Splunk.

Intrusion Detection Machine Learning Python T Pot AWS EC2 Splunk

GRC Framework Designer

West Virginia University ITS

Designed an enterprise GRC program integrating COBIT 2019, ISO 38500, NIST SP 800-30 and NIST CSF, performed qualitative and quantitative risk assessments, and produced an 18-month roadmap for compliance automation and continuous monitoring. Conducted maturity assessments and delivered governance documentation and audit recommendations.

GRC ISO 38500 Risk Assessment Policy Development