Brendon Roberts
Cybersecurity Analyst · Incident Response · Digital Forensics
Summary
Cybersecurity analyst with over two years of hands-on experience in incident response, digital forensics and security operations at a regional electric utility. I investigate incidents across endpoint, identity, email and cloud environments, and write incident documentation that maps attacker activity to MITRE ATT&CK for technical teams and stakeholders. Experienced with SIEM, EDR, SOAR, threat intelligence and threat hunting. Working toward the GIAC Certified Forensic Analyst (GCFA) with a goal of specializing in digital forensics.
Experience
Cybersecurity Analyst · FirstEnergy, Akron, OH
Aug 2024 – present- Triage, investigate and respond to security incidents across endpoint, identity, email, network and cloud environments using SIEM and EDR tooling.
- Conduct digital forensics on compromised endpoints and accounts, including Azure and Entra ID investigations, to determine scope, impact and root cause.
- Investigate business email compromise and adversary-in-the-middle phishing in Microsoft 365 and Entra ID, and recommend containment and remediation.
- Write incident response documentation and investigation reports that map attacker activity to MITRE ATT&CK.
- Follow chain-of-custody procedures for evidence handling, with ongoing training in formal forensic evidence practices.
- Perform static and dynamic malware analysis and analyze threat actor TTPs to support the threat intelligence team.
- Create detection content and run proactive threat hunts for activity that evaded existing detections.
- Respond to alerts with SOAR automation, including playbooks and integrations that reduce manual work.
- Participate in ransomware tabletop exercises, and mentor new analysts on SOC tools, triage and investigation processes.
Information Technology Specialist · Clampco Products, Wadsworth, OH
Jan 2023 – Aug 2024- Monitored devices with RMM and EDR tooling, investigating endpoint alerts and anomalies to remediate issues.
- Configured and maintained Fortinet infrastructure (FortiGate, FortiSwitch, FortiAP), Active Directory and servers.
- Resolved helpdesk tickets and deployed new systems while completing an associate degree through the apprenticeship.
Technology Assistant Intern · Barberton City School District, Barberton, OH
May 2022 – Oct 2022- Configured Cisco switchports, deployed and maintained IT infrastructure, and resolved helpdesk issues.
Skills
Incident ResponseDigital ForensicsThreat HuntingMITRE ATT&CKCyber Kill ChainSIEM (Splunk ES, Microsoft Sentinel)EDR (Microsoft Defender, SentinelOne)SOAR (XSOAR)Threat Intel (Anomali ThreatStream, EclecticIQ)Malware AnalysisDetection EngineeringMicrosoft 365 & Entra IDActive DirectoryNetwork SecurityPowerShell / BashTechnical Writing
Certifications
- GIAC Certified Forensic Analyst (GCFA)in progress
- ISC2 Systems Security Certified Practitioner (SSCP)
- CompTIA Cybersecurity Analyst+ (CySA+)
- CompTIA PenTest+
- CompTIA Security+
- CompTIA Network+
- CompTIA A+
- CompTIA Project+
Education
- B.S. Cybersecurity & Information Assurance
Western Governors University · 2025 – 2026 - A.A.S. Computer Network Administration & Security Technology
Stark State College · 2023 – 2025 - ⚜ Eagle Scout
Scouting America (Boy Scouts of America)