Open to opportunities

Nick Brown

@nickbrown

Message

Senior IT Security Analyst specializing in threat hunting and incident response.

United States

Message

What I'm looking for

I am looking for a challenging role in cybersecurity that offers opportunities for growth and collaboration in a dynamic team environment.

I am a Senior IT Security Analyst with over 5 years of experience in threat hunting, incident response, and network security. My expertise lies in identifying security gaps and providing actionable solutions to enhance security posture. I have a proven track record of managing client relationships with zero attrition while conducting thorough investigations and driving research initiatives to improve threat detection capabilities.

Currently, I lead incident investigations at Sophos, where I mentor a team of analysts and implement improvements in threat detection. My previous roles have equipped me with strong technical skills and the ability to communicate effectively with stakeholders at all levels. I am passionate about cybersecurity and committed to protecting organizations from potential threats.

Experience

Work history, roles, and key accomplishments

Senior Threat Analyst

Sophos

May 2023 - Present (2 years)

Led investigations into high-severity cybersecurity alerts, leveraging OS Query for estate-wide searches of IOCs and threat actor activity. Directed comprehensive incident response investigations to identify root cause, scope attacks, contain threats, and provide strategic remediation plans.

Incident Response Threat Detection Mentoring

Senior MDR/DFIR Analyst

Packetwatch

Aug 2021 - Present (3 years 9 months)

Analyzed and monitored security threats, proactively searching for network and host-based evidence of compromise across client environments. Performed incident response and digital forensics, analyzing logs and artifacts to determine initial access and scope of attacks.

Client Relationship Management Incident Response Digital Forensics

Senior SOC Analyst

Datashield

Jan 2020 - Present (5 years 4 months)

Responded to potential host and network-based threats, utilizing network data to advise on remediation. Analyzed and investigated network-based events and alerts, including phishing emails and Active Directory-based alerts.

Network Security Incident Response Phishing Threat Intelligence

Application Security Analyst

American Express

Jun 2019 - Present (5 years 11 months)

Managed an inventory of over 1,000 web applications to ensure proper security scanning and validated vulnerabilities reported by production scanners. Assisted web application teams with vulnerability remediation and confirmed successful completion.

Application Security Vulnerability Management Web Application Scanning Open Source Component Management

IT Security Analyst II

American Airlines

Jun 2018 - Present (6 years 11 months)

Inspected and responded to potential threats on the American Airlines network while mentoring Tier I analysts. Investigated alerts escalated by Tier 1 Analysts and reviewed tickets for phishing, malware, and network events.

Network Security Mentoring Threat Intelligence

Core Volunteer – Intrusion Detection

Arizona Cyber Warfare Range - Grand Canyon University

Dec 2017 - Present (7 years 5 months)

Focused on intrusion detection, packet analysis, proper escalation, and incident response. Utilized Snort via Security Onion to monitor traffic in real-time and issue alerts for malicious packets.

Intrusion Detection Incident Response Snort Wireshark

Operations Manager & Co-Owner

Village Herbalist Enterprises, LLC

Jan 2011 - Present (14 years 4 months)

Supervised two retail locations and a restaurant, managing technical operations for two websites. Facilitated hosting and server management, and developed, maintained, and updated website content and performance.

Operations Management Customer Service Quality Control

Education

Degrees, certifications, and relevant coursework

GIAC

Certified Forensic Analyst, Forensic Analysis

Obtained certification as a forensic analyst through GIAC GCFA. This certification validates expertise in digital forensics and incident response.

Sentinel One

Certified, Endpoint Protection

Completed the Sentinel One certification program. This validates proficiency in using Sentinel One for endpoint protection.

Black Hills Information Security

Certified, Windows Post Exploitation

Completed the Black Hills Windows Post Exploitation certification. This program focused on advanced techniques for post-exploitation on Windows systems.

Bryant College

Bachelor of Science, Marketing

Majored in Marketing as part of a Bachelor of Science in Business Administration. The curriculum covered various aspects of business and marketing principles.