Highlights:

Skills:Information Security Management, Network Security, Cyber Incident Handling and Responding, Incident Response, Vulnerability Management, Penetration Testing, Firewall, SIEM, Intrusion Prevention Systems, Compliance, Intrusion Detection, Malware Analysis, Incident Management, Forensics, Web Security, Security Inspection, Threat Hunting, System Administration, Operating Systems, Shell Scripting, Log Management, Python, Threat Intelligence, Cyber Security, IT Consulting, Cyber Intelligence, Cyber Security in Artificial Intelligence and Mach, Privacy, Cloud Security, Splunk, Nessus, Tenable, Fraud Management system, Powershell, Security Operations Center, IT Operations Management, Strategy Development, Collaboration, Leadership, Project Management, Presentation, Analytical skill

Analyst Intern 06/2024 - 08/2024
Charles River Associate, Washington D.C, District of Columbia United States
Conducted forensic analysis on ransomware, incident response, data exfiltration, and business email compromise cases. Collaborated with teams to provide insights and updates during investigations. Proficient in using EDR, SIEM, and Threat Intelligence platforms, contributing to effective threat detection and mitigation.
• Engaged in forensic analysis for ransomware, incident response, data exfiltration, and business email compromise cases. • Collaborated closely with team members throughout the investigation, contributing insights to project status. • Hands-on experience with multiple EDR, SIEM, and Threat Intelligence platforms.--
Teaching Assistant, Network Defense course 08/2024 - 11/2024
Carnegie Mellon University, Pittsburgh, Pennsylvania United States
• Assisted in teaching the course, covering network traffic analysis, firewalls, intrusion detection systems, and SIEM topics. • Facilitated hands-on labs and exercises, helping students understand network security fundamentals, TTP, and defense strategies.
• Assisted in teaching the course, covering network traffic analysis, firewalls, intrusion detection systems, and SIEM topics. • Facilitated hands-on labs and exercises, helping students understand network security fundamentals, TTP, and defense strategies.--
Information Security Manager 08/2018 - 06/2023
UNITEL LLC, Ulaanbaatar, Mongolia
Developed the company’s first Cybersecurity strategy using NIST CSF, aligning security goals with business objectives and best practices. Influenced cloud and security strategy decisions and led teams to mitigate cyber incidents and IT risks. Coordinated security integration into operations, fostered awareness programs, and cultivated a collaborative team culture. Specialized in security systems implementation, architecture, and consulting, enhancing security infrastructure and delivering advisory services to enterprise clients.
• Developed and presented the company's inaugural Cybersecurity strategy using NIST CSF, providing a roadmap for bolstering overall security posture. • Influenced in shaping the company's decision on cloud and security strategies. • Aligned cybersecurity vision and strategy with business objectives and industry best practices. • Oversaw a team in identifying, developing, enforcing, and maintaining processes across the enterprise to alleviate cyber incidents and IT risks. • Supervised high-performing teams, fostering a collaborative and innovative culture to achieve goals. • Coordinated, collaborative projects to integrate security measures into business operations. • Established security awareness programs, educating employees to enrich security culture. • Specialized in planning, researching, and implementing security systems, ensuring strict adherence to best practices and optimized functions. • Delivered cybersecurity consulting and advisory services to clients and enterprise customers. • Provided expertise in security architecture, optimizing clients' security infrastructure.--
Information Security Analyst 08/2014 - 08/2018
UNITEL LLC, Ulaanbaatar, Mongolia
Cybersecurity expert skilled in conducting vulnerability assessments, penetration tests, and managing systems like firewalls, IPS, EDR, and SIEM tools to strengthen defenses. Experienced in threat monitoring, detection, and incident response, with a focus on proactive threat hunting to minimize impacts. Proficient in developing and implementing robust security policies to ensure confidentiality, integrity, and availability of information assets. Successfully mitigated numerous cybersecurity threats, protecting networks, services, and customer data while advancing overall security posture.
• Conducted regular vulnerability assessments and penetration tests to identify and alleviate cyber risks, ensuring the organization's products, assets, networks, and data security. • Operated and managed cybersecurity systems, including Firewalls, Intrusion Prevention Systems, EDR, Email security gateway, and Security Information and Event Management (SIEM) tools to improve the overall cybersecurity posture, focusing on continuous advancement. • Monitored, detected, and reported cyber threats and malicious hacker attacks, taking proactive measures to safeguard the corporation's networks and systems. • Led incident response efforts, investigating and threat hunting to minimize impact. • Developed and applied comprehensive information security policies, procedures, and guidelines to ensure confidentiality, integrity, and availability of the organization's information assets. • Detected and prevented numerous cybersecurity risks and threats, contributing to the protection of services, customers, and the organization.--

Mongolian University of Science and Technology 09/2010 - 06/2014
Ulaanbaatar, , Mongolia
Degree: Bachelor's Degree
Major:Cybersecurity
Bachelor of Computer Science in Computer Systems Security

Login to view resume: Mendy Resume -