Marcus Bell
Cybersecurity Analyst | Detection Engineering, Incident Response and Vulnerability Management
Summary
Cybersecurity Analyst with 6 years in a managed security provider and a regional bank. Investigates alerts, leads incident response for phishing and endpoint compromises, and writes detections that analysts trust. Holds Security+, CySA+ and GCIH, and works comfortably with FFIEC and PCI DSS auditors.
Experience
Cybersecurity AnalystFeb 2023 - Present
Commonwealth Regional Bank
- Reduced false-positive SIEM alerts by 45% by tuning 60 Splunk correlation searches, which freed about 15 analyst hours a week.
- Lead response on 20 to 30 security incidents a quarter; median time to contain dropped from 6 hours to 90 minutes.
- Phishing click rate across 1,400 employees fell from 11% to 3% over 18 months of monthly simulations and targeted training.
- Run the vulnerability management program for 2,200 endpoints and 180 servers, keeping critical patches within a 14-day SLA.
- Prepared evidence for 2 FFIEC exams and a PCI DSS assessment with no findings in my areas.
SOC AnalystJul 2020 - Jan 2023
Sentry Point Managed Security
- Triaged 80 to 100 alerts per shift for 35 client environments in a 24/7 SOC.
- Wrote 25 runbooks for common alert types that cut new analyst onboarding from 6 weeks to 4.
- Promoted from Tier 1 to Tier 2 in 14 months.
Skills
- Incident Response
- SIEM (Splunk)
- EDR (CrowdStrike Falcon)
- Threat Hunting
- Detection Engineering
- Vulnerability Management (Tenable)
- Phishing Analysis
- MITRE ATT&CK
- Python Scripting
- NIST CSF, FFIEC and PCI DSS
Certifications
- CompTIA Security+
- CompTIA CySA+
- GIAC Certified Incident Handler (GCIH)
Education
BS in Cybersecurity, George Mason University, 2020