Open to opportunities

Stephen McManus

@stephenmcmanus

Message

Experienced cybersecurity leader specializing in data loss prevention and threat analysis.

United States

Message

What I'm looking for

I seek a cybersecurity role focused on DLP/threat analysis with opportunities to lead projects, reduce risk, mentor analysts, and deploy enterprise security tools.

I am an experienced cybersecurity professional with over a decade focused on cyber operations, threat analysis, and data loss prevention. I have led strategic security initiatives, reduced risk through improved detection fidelity, and driven projects that lowered false positives and alert fatigue.

I have managed high-visibility investigations into data exfiltration, architected DLP deployments and QOR processes, and mentored SOC teams to raise analyst capabilities. I deliver measurable operational improvements, including scan-time reductions and successful tool deployments across enterprise environments.

Experience

Work history, roles, and key accomplishments

Current

Assistant Vice President, DLP Analyst

Current

Truist Financial

Aug 2021 - Present (4 years 5 months)

Triage and investigate high-value data exfiltration alerts using Symantec and Forcepoint DLP, led projects to reduce alert noise and backlog, and supported deployment of Palo Alto DLP on NGFWs to improve detection fidelity.

Data Loss Prevention Symantec DLP Forcepoint Triage Incident Response QOR Processes

Assistant Vice President, Cybersecurity Threat Senior Analyst

Truist Financial

Dec 2019 - Aug 2021 (1 year 8 months)

Responded to SOC alerts and escalated to CIRT, initiated tuning projects to reduce false positives and alert fatigue, and collaborated on proactive threat hunts across the environment.

SOC Threat Hunting Alert Tuning Escalations Splunk Crowdstrike CIRT Coordination

Assistant Vice President, Senior Cyber Threat Analyst

SunTrust Banks

Jul 2018 - Dec 2019 (1 year 5 months)

Tracked incident escalations to resolution using PICERL, detected and investigated data exfiltration with Symantec DLP, and provided malware/exploit analysis while mentoring event analysts.

Incident Response Symantec DLP Malware Analysis PICERL Threat Detection Mentoring Documentation

SOC Analyst (TEKsystems / SAIC)

TEKsystems

Mar 2018 - Jul 2018 (4 months)

Performed SOC analyst duties for a SAIC client including responding to phishing, IDS/IPS, and endpoint alerts using FireEye, CrowdStrike, Symantec DLP and Palo Alto; researched threat intel and IOCs for engineering remediation.

SOC Crowdstrike Symantec DLP IPS Threat Intelligence

SOC Analyst / IAM / Vulnerability Analyst

Verizon Telematics

Sep 2015 - Jul 2018 (2 years 10 months)

Progressed through vulnerability management and IAM to SOC analyst roles; deployed Nexpose/Qualys scan engines reducing scan time by 60% and served as liaison for physical access audit remediation.