Agio

•	Threat Detection & Analysis: Utilized Stellar Cyber Open XDR to analyze SIEM logs and correlated data to identify potential threats and anomalous activities, implementing proactive measures to mitigate risks. 
•	Endpoint Investigations: Investigated endpoints using Cylance OPTICS & PROTECT, addressing malicious files and activities effectively. 
•	Incident Management: Managed alert-generated tickets in ServiceNow, performed detailed investigations using multiple security platforms, and escalated confirmed malicious incidents to clients while maintaining SLA compliance. 
•	Client Support: Responded to client requests via email and calls, conducting investigations and implementing proactive security actions. 
•	Alert Optimization: Spearheaded alert-tuning initiatives to reduce noise, improving efficiency by reducing one alert type from 600/day to 40/day. 
•	Phishing Analysis: Investigated phishing emails through Inky, leveraging OSINT to analyze email headers and sender information to identify malicious intent. 
•	Reporting & Documentation: Produced detailed client reports summarizing actions taken and changes made within their environments, improving transparency and client relationships. 
•	Process Improvement: Collaborated with cross-functional teams to automate workflows, streamlining alert management and improving XDR service quality. 
•	Knowledge Sharing: Created documentation for best practices, procedures, and playbooks; conducted training sessions and shadowing for new analysts. 
•	Vulnerability Management: Performed vulnerability management using Tenable.io and Tenable.sc, including patching and scans to improve client security postures.

Junior Cybersecurity Analyst - XDR

Business Services Organisation (BSO)

•	Firewall Management: Proactively performed allow/block actions on firewalls to address various operational needs whilst using Sophos. 
•	Access Management: Managed user accounts and implemented Multi-Factor Authentication (MFA) tokens to enhance account security. 
•	User Support: Coordinated with internal teams to create user IDs for remote access and ensured seamless connectivity for authorized users. 
•	Issue Resolution: Resolved security-related user issues via phone and email, delivering timely and effective solutions.

Technical Support IT Security Placement Year Intern

Dedicated and highly skilled Cybersecurity Analyst with 3 years of experience in security operations, including 2 years in a 24x7 Security Operations Center (SOC) environment. Adept at monitoring, analyzing, and responding to security incidents to protect client environments and improve overall security posture.

Taplio

Eoin McLaughlin's Linkedin Analytics

Eoin McLaughlin

Want to drive more opportunities from LinkedIn?