Surafel W
@surafelw
I reduce enterprise security risk through vulnerability management, endpoint monitoring, and actionable remediation guidance.
United StatesWhat I'm looking for
At Citigroup, I run enterprise vulnerability management operations across Nessus, Qualys VMDR, SCAP, CIS Benchmarks, and security control assessments. My remediation coordination contributed to reducing critical vulnerabilities by approximately 40%.
I support endpoint monitoring and incident triage with Microsoft Defender for Endpoint/XDR, Splunk, and Microsoft Sentinel. I also assess Active Directory security with PowerShell and monitor Splunk infrastructure to protect security visibility.
Previously at Novartis Biomedical Research, I supported security operations and enterprise applications through vulnerability analysis, access administration, incident troubleshooting, and controlled changes. I translate technical findings into prioritized remediation guidance for infrastructure, application, network, and security teams.
Experience
Work history, roles, and key accomplishments
Performs credentialed scans, security assessments, and vulnerability management operations across enterprise systems. Coordinates remediation with multiple teams and contributed to reducing critical vulnerabilities by approximately 40%.
Security Operations and Application Support Analyst
Sep 2021 - Nov 2022 (1 year 2 months)
Supported security operations and enterprise applications through endpoint monitoring, vulnerability analysis, incident troubleshooting, and access administration. Partnered with cross-functional teams to resolve incidents and strengthen security posture.
Education
Degrees, certifications, and relevant coursework
University of Massachusetts
Bachelor of Science, Information Technology
Bachelor of Science in Information Technology from the University of Massachusetts.
CompTIA
CompTIA CySA+, Cybersecurity
CompTIA CySA+ certification.
CompTIA
CompTIA Security+, Cybersecurity
CompTIA Security+ certification.
Microsoft
Microsoft Certified Security Compliance and Identity Fundamentals SC-900, Security, Compliance, and Identity
Microsoft Certified Security Compliance and Identity Fundamentals SC-900 certification.
Tech stack
Software and tools used professionally
Availability
Location
United StatesAuthorized to work in
Salary expectations
Social media
Job categories
Skills
Interested in hiring Surafel?
You can contact Surafel and 90k+ other talented remote workers on Himalayas.
Message SurafelGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
