Yves Roberson LORVILLE

Experience

• 

  Comcel Electronic Inc.

  Mar 2018 - Mar 2019

  Penetration Tester

  • Assessed measures to protect from security breaches and attacks on computer networks and systems. • Worked with cross-functional teams to ensure compliance with SOC Team Cyber Security Risk Management procedures throughout the system. • Installed and upgraded hardware and software for remote sites as well as local users and ensured that appropriate security measures were implemented in alignment with standard guidelines.• Conducted open-source research to find new threats and IOCs. • Served as the system tool owner for our security applications (Splunk, Carbon Black, etc.). • Completed Threat Intelligence using Cyber Kill Chain, Diamond Model, STRIDE and PASTA. • Completed Cyber Security monitoring, identifying vulnerabilities, and documenting all events. • Worked with NIST Compliance, Security Management and Operations, Vulnerability Assessment, Risk Management Framework, Incident Response, Threat Detection and Mitigation. • Oversaw asset tracking, loss prevention, and hardware/software remediation, as well as change management for on-site network equipment. • Applied NIST Risk Management Framework as a basis for SOC team Cyber Security guidelines such as Continuous Monitoring. • Produced documentation for security policies and procedures aligned with industry best practices and security frameworks such as NIST 800-53, 800-171, NIST Cybersecurity Framework, ISO 27001. • Prepared and created documentation for various IT security engagement deliverables, including risk assessment results, plan of action documents, milestone (POAM) lists, system security plans, etc. Show less

• 

  Enhance IT

  May 2019 - May 2021

  Security Operations Center Analyst

  • Monitor computer networks and systems for threats and security breaches • Install, alter, and update security software and firewalls• Test systems for potential vulnerabilities• Develop systems and processes for security best practices throughout the company• Prepare reports on security incidents and changing responses• Write and review some scripts in Python and Java to check the compliance of CIS Benchmark and PowerShell to automate the compliance.• Managing the GRC platform to coordinate and execute compliance projects such as NIST, ISO 27001, SOC1, SOC2, PCI. Show less

• 

  NYS Office of Information Technology Services

  Mar 2023 - now

  Information Technology Specialist

  • Review diagnostics and assess the functionality and efficiency of systems.• Implement security measures.• Monitor security certificates and company compliance with requirements.• Offer technical support to company staff and troubleshoot computer problems.• Analyze system issues and provide resolutions.• Assess potential risks and technical challenges and prepare appropriate mitigation plans.• Recommend process improvements to ensure system reliability, scalability, security, integrity, and performance. Show less