Cybersecurity Engineer / Systems Administrator
- Perform security monitoring, incident investigation, vulnerability analysis, endpoint security reviews, and remediation across enterprise and government environments.
- Investigate phishing, suspicious email activity, malicious executables, ScreenConnect/remote-access activity, and potentially compromised endpoints; analyze IOCs, endpoint telemetry, user activity, persistence, and network indicators.
- Support incident response from alert triage through investigation, containment recommendations, remediation, and technical documentation.
- Conduct vulnerability assessments and remediation using Nessus; prioritize findings based on severity, exposure, affected systems, and operational risk.
- Harden Windows systems using Active Directory Group Policy and security configurations aligned with NIST and DISA STIG guidance.
- Conduct forensic investigations using Autopsy and FTK to analyze disk images, browser artifacts, Outlook cache data, Windows Prefetch, file-system metadata, persistence mechanisms, and system timelines.
- Generate and document SHA-256 hashes, correlate forensic evidence across endpoint and email activity, and produce structured incident-response findings.
- Administer Active Directory accounts, groups, permissions, security policies, onboarding/offboarding, identity access, and enterprise permissions.
- Support Microsoft 365, Entra ID, Microsoft Defender, Windows endpoints, authentication, endpoint configuration, and enterprise collaboration services.
- Support EPA-related federal environments involving system monitoring, cybersecurity operations, compliance activities, and infrastructure administration.
- Deploy and maintain infrastructure supporting West Virginia county government organizations and document security, system, and remediation activities.