Alex Collins

Enterprise Security Monitoring & Incident Response

• Monitored enterprise environments for suspicious activity, endpoint threats, and abnormal authentication patterns.
• Investigated phishing attempts, malware alerts, account compromise indicators, and lateral movement risks.
• Performed log analysis across Windows Event Logs, firewall logs, VPN logs, and endpoint protection platforms.
• Executed containment procedures including account disablement, password resets, and endpoint isolation.
• Documented full incident lifecycle in ServiceNow, ensuring SLA compliance and regulatory audit readiness.
• Collaborated with cybersecurity and infrastructure teams to perform root cause analysis and prevent recurrence.

Vulnerability Management & Risk Remediation

• Assisted in vulnerability identification and remediation coordination across enterprise endpoints and servers.
• Partnered with system administrators to validate patch deployment and confirm remediation of critical CVEs.
• Participated in access reviews to reduce excessive privileges and enforce least-privilege principles.
• Supported firewall rule reviews and network segmentation improvements.
• Ensured remediation efforts aligned with internal security policy and compliance standards.

Identity & Access Management (IAM)

• Provisioned, modified, and deprovisioned user accounts in Active Directory and enterprise systems.
• Conducted RBAC validation and segregation of duties reviews for regulated environments.
• Troubleshot complex authentication issues involving Group Policy, MFA, VPN, and domain trust relationships.
• Investigated account lockouts, Kerberos errors, and domain replication inconsistencies.
• Supported Azure AD / hybrid identity synchronization environments.

Advanced Enterprise Troubleshooting

• Diagnosed network connectivity issues involving DNS, DHCP, TCP/IP misconfigurations, and routing conflicts.
• Resolved VPN connectivity and split-tunnel configuration issues for remote workforce environments.
• Troubleshot endpoint encryption, antivirus conflicts, and system performance degradation.
• Investigated application-level failures tied to database connectivity and permission misalignment.
• Supported Windows system recovery, registry repairs, driver conflicts, and patch rollback scenarios.

Healthcare & Regulated Environment Security Support

• Supported EPIC EHR environments ensuring secure user access and minimal clinical disruption.
• Handled high-priority patient-impacting incidents with urgency and structured escalation.
• Maintained HIPAA-aligned security practices for PHI protection and access auditing.
• Assisted in security validation of medical endpoints and workstation configurations.

• CompTIA A+
• CompTIA Network+
• CompTIA Security+
• Cisco CCNA