Open to opportunities

Moustapha A

@moustaphaa

Message

Information Security Engineer at Wells Fargo who cut CTFC false-positive alerts 30% through SIEM and EDR tuning.

United States

Message

At Wells Fargo, I engineer threat detection, incident response, CTI, and IAM automation for security operations. By tuning SIEM and EDR rules, I reduced daily CTFC false-positive alerts by 30%.

I automated IAM workflows and threat-intelligence reporting with Python, Microsoft Copilot, Power Automate, Power BI, and ThreatConnect. I also built secure RESTful integrations and CI/CD workflows for security content.

Previously, at MSA Security and CNL, I monitored endpoints, investigated alerts, and supported SOC case handling using tools including Splunk, QRadar, and Microsoft Azure. My work also included malware analysis, vulnerability scanning, and Python scripting.

Experience

Work history, roles, and key accomplishments

Current

Information Security Engineer

Current

Wells Fargo

Oct 2023 - Present (3 years)

Fortified 24x7 security operations protecting 34M+ daily banking customers by engineering threat detection, incident response, CTI, and IAM automation using Splunk ES, CrowdStrike, and ThreatConnect. Reduced false-positive alerts by 30% and automated workflows to cut manual effort by 50%.

Splunk Enterprise Security Crowdstrike ThreatConnect Microsoft Copilot Power Automate Power BI Python Azure DevOps Git CI CD IAM CyberArk REST APIs Azure NIST MITRE ATT&CK

Cyber Security Analyst

MSA Security

Dec 2021 - Oct 2023 (1 year 10 months)

Sustained security standards above 90% by following SOC playbook and contributed to operational improvements. Reduced cyber-attack threats by 20% by monitoring and investigating 5k+ endpoints using Splunk, Microsoft Azure, FireEye, and Microsoft Defender ATP.

Splunk Azure FireEye Microsoft Defender ATP Active Directory ServiceNow Virus Total AnyRun Cuckoo Sandbox MalwareBazaar IBM X Force MITRE ATT&CK

Information Security Analyst

CNL

Jan 2021 - Dec 2021 (11 months)

Reduced cyber-attacks 25% by monitoring and investigating 250+ endpoints using IBM QRadar, Microsoft Azure, CrowdStrike, Microsoft Defender ATP, and McAfee EPO. Maintained security performance above 90% by applying SOC playbook principles and escalating 500+ cases per month.

IBM QRadar Azure Crowdstrike Microsoft Defender ATP McAfee EPO Resilient Jira Wireshark Nmap Tenable Nessus Metasploit Python SQL PowerShell BASH

Information Technology Specialist

TASC

Sep 2019 - Jan 2021 (1 year 4 months)

Increased efficiency 30% in technical and digital operations by maintaining equipment for 200+ students, staff, and mentors. Improved productivity 24% by setting up email systems using Microsoft 365 Business and providing network and telecommunication support.

Microsoft 365 Zoom IT Support Asset Management Reporting

Information Technology Admin

IME LLC

Sep 2018 - Sep 2019 (1 year)

Strengthened product pricing strategy by engineering data reports and visualizations with Python and Excel. Created 35% productivity growth in warehouse management by collaborating with software developers on warehouse management and barcode-check apps.

Python Excel Data Analysis Warehouse Management Automation