Open to opportunities

Simon Oko

@simonoko

Message

Cybersecurity analyst protecting cloud and enterprise environments with measurable impact.

United States

Message

What I'm looking for

I’m seeking a cybersecurity role where I can lead SOC/cloud security efforts, drive automation, and strengthen compliance and incident response in a collaborative, security-first organization.

I am a cybersecurity analyst with 8+ years of hands-on experience protecting enterprise and cloud infrastructures through proactive threat detection, incident response, vulnerability management, and GRC alignment. I have leveraged tools such as Splunk, SentinelOne, Qualys, Imperva WAF, AWS Security Hub, GuardDuty, and RSA Archer to improve detection coverage, reduce false positives, and accelerate audit readiness against NIST, SOC 2, and HIPAA frameworks.

I deliver measurable outcomes — from automating alert triage and EDR-SIEM integrations that improved detection and response times, to leading Imperva WAF policy migrations that cut false positives by 20% and driving remediation efforts that reduced audit findings and MTTD. I collaborate across compliance, cloud, network, and DevOps teams to close gaps, standardize incident playbooks, and present actionable intelligence to leadership.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Analyst III

Current

Texas Health and Human Services

May 2024 - Present (1 year 6 months)

Manage enterprise threat monitoring and incident response using SentinelOne, Qualys, Splunk, and Imperva WAF, reducing false positives by 20% and improving audit readiness for HIPAA and SOC 2.

SentinelOne Qualys Splunk Imperva RSA Archer Incident Response Change Management Threat Intelligence

SOC Analyst

5F/Halliburton

Sep 2022 - May 2024 (1 year 8 months)

Led Splunk–SentinelOne EDR-SIEM integration and proactive threat hunts, increasing anomaly detection coverage by 40% and cutting incident response time via SOAR automation by 35%.

Splunk SentinelOne EDR SOAR Threat Hunting Incident Response Playbook Development

Cyber Security Analyst - AWS

Walmart

Apr 2019 - Jul 2022 (3 years 3 months)

Oversaw AWS monitoring with CloudTrail, GuardDuty, and Security Hub, reducing MTTD by 40% and automating compliance reporting to accelerate audits by 25%.