{"id":110,"date":"2025-01-06T19:32:34","date_gmt":"2025-01-06T19:32:34","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/cyberimpact1\/?page_id=110"},"modified":"2026-09-22T00:44:29","modified_gmt":"2026-09-22T00:44:29","slug":"resume","status":"publish","type":"page","link":"https:\/\/sites.wp.odu.edu\/jacobasare\/resume\/","title":{"rendered":"Resume"},"content":{"rendered":"\n

Jacob Asare<\/strong><\/p>\n\n\n\n

SOC Analyst 1 |Cybersecurity Analyst 1| Junior EDR Alert Monitoring & Incident Response|<\/em> Pen Tester 1<\/em><\/p>\n\n\n\n

Woodbridge, VA\u00a0 |\u00a0\u00a0 571-778-2840\u00a0\u00a0 |\u00a0\u00a0 asarejayke@gmail.com\u00a0\u00a0 |\u00a0\u00a0 \u00a0https:\/\/sites.wp.odu.edu\/jacobasare\/<\/a> | https:\/\/www.linkedin.com\/in\/jacob-asare<\/a><\/p>\n\n\n\n

PROFESSIONAL SUMMARY<\/strong><\/p>\n\n\n\n

Cybersecurity professional combining 13+ years of security operations experience with hands-on technical training through a B.S. in Cybersecurity (3.97 GPA, expected Fall 2026). CompTIA Security+ certified, with lab-validated experience across the full security lifecycle: threat modeling (STRIDE\/DREAD), network reconnaissance and vulnerability scanning (Nmap, NSE scripts), exploitation (Metasploit), OSINT (Shodan, WHOIS, Netcraft), dynamic malware analysis (Any.Run), and digital forensics (Autopsy, OSForensics, WinHex). Skilled at translating technical findings into clear, structured documentation for both technical and non-technical stakeholders \u2014 a strength built over a decade of real-time incident monitoring, triage, and escalation in high-stakes environments. Seeking an entry-level SOC Analyst, EDR Alert Monitoring, Cybersecurity Analyst or Penetration Testing role where rigorous documentation habits, sound judgment under pressure, and hands-on offensive\/defensive lab experience deliver immediate value.<\/p>\n\n\n\n

CORE COMPETENCIES<\/strong><\/p>\n\n\n\n

\u25aa Penetration Testing & Ethical Hacking<\/td>\u25aa Vulnerability Assessment & Scanning<\/td><\/tr>
\u25aa Threat Modeling (STRIDE \/ DREAD)<\/td>\u25aa OSINT & Passive Reconnaissance<\/td><\/tr>
\u25aa Digital Forensics & Evidence Handling<\/td>\u25aa Malware Analysis (Dynamic Sandbox)<\/td><\/tr>
\u25aa Network Traffic Analysis (Wireshark, Nmap)<\/td>\u25aa MITRE ATT&CK Mapping<\/td><\/tr>
\u25aa EDR Alert Triage & Investigation<\/td>\u25aa Incident Response & Documentation<\/td><\/tr>
\u25aa Python Scripting & Linux CLI<\/td>\u25aa Stakeholder Communication & Reporting<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

TECHNICAL SKILLS<\/strong><\/p>\n\n\n\n

Offensive Security: <\/strong>Nmap (host discovery, port\/service scanning, NSE vulnerability & brute-force scripts), Metasploit Framework (exploit selection, payload configuration, session management), DNS enumeration (dig, host, dnsenum, zone transfer testing)<\/p>\n\n\n\n

OSINT & Recon: <\/strong>Shodan (exposed device\/CVE discovery), WHOIS & Netcraft (domain\/IP intelligence), ICS\/IoT exposure analysis, MITRE ATT&CK Enterprise Matrix mapping<\/p>\n\n\n\n

Malware Analysis: <\/strong>Any.Run dynamic sandbox analysis, Malware Bazaar sample retrieval, IOC identification, HTTP\/DNS traffic review, C2 and propagation behavior analysis<\/p>\n\n\n\n

Digital Forensics: <\/strong>Autopsy (disk imaging, write-blocking, evidence acquisition), OSForensics (cloud-sync artifact analysis \u2014 Dropbox, Google Drive, OneDrive), WinHex (MAC timestamps, artifact inspection), Windows Prefetch analysis, FAT\/NTFS\/ext file recovery, chain-of-custody documentation<\/p>\n\n\n\n

Monitoring & Response: <\/strong>EDR concepts, Intrusion Detection Systems, Microsoft Sentinel (familiar), Microsoft Azure (familiar), alert triage & true\/false-positive validation, security playbooks<\/p>\n\n\n\n

Scripting & Platforms: <\/strong>Python, Windows PowerShell, Linux command line, Wireshark, TCP\/IP fundamentals, GitHub<\/p>\n\n\n\n

CERTIFICATIONS<\/strong><\/p>\n\n\n\n

    \n
  • CompTIA Security+<\/li>\n<\/ul>\n\n\n\n

    HANDS-ON LABS & PROJECTS<\/strong><\/p>\n\n\n\n

      \n
    • Penetration Testing Lab (Metasploitable 2 and Kali Linux): <\/strong>Built DFDs and applied STRIDE\/DREAD threat modeling to map trust boundaries; ran Nmap reconnaissance and NSE vulnerability scans across FTP, HTTP, SMB, and RPC services; selected and executed Metasploit exploits to achieve remote command execution, with exploit-to-payload justification documented in a structured technical report.<\/li>\n\n\n\n
    • OSINT & Exposed-Asset Assessment: <\/strong>Used Shodan to identify internet-exposed IoT\/ICS devices (including Modbus\/port 502 systems), CVEs, and misconfigurations; performed WHOIS\/Netcraft lookups for infrastructure intelligence and mapped findings to MITRE ATT&CK techniques with recommended mitigations.<\/li>\n\n\n\n
    • Malware Behavioral Analysis (Cloud Sandbox): <\/strong>Retrieved Mirai and VIPKeylogger samples from Malware Bazaar and detonated them in Any.Run; analyzed HTTP requests, DNS queries, and network connections to extract IOCs and map behavior to ATT&CK techniques, contrasting botnet propagation versus credential-theft tactics.<\/li>\n\n\n\n
    • Digital Forensics Investigation: <\/strong>Acquired forensic disk images in Autopsy under write-blocking principles; recovered deleted files and metadata from FAT\/NTFS\/ext file systems; analyzed Windows Prefetch execution artifacts and cloud-sync logs (Dropbox, Google Drive, OneDrive) to reconstruct user activity and file-upload timelines.<\/li>\n\n\n\n
    • S-DES Encryption Tool (Python): <\/strong>Developed a Python implementation of the Simplified Data Encryption Standard, including an SVG diagram of the algorithm and a recorded technical walkthrough of the encryption\/decryption workflow.<\/li>\n\n\n\n
    • Self-Directed Practice: <\/strong>Completed offensive and defensive security exercises on TryHackMe, Hack The Box, and Let’s Defend, including CTF challenges and independent study of Microsoft Sentinel and Azure.<\/li>\n<\/ul>\n\n\n\n

      PROFESSIONAL EXPERIENCE<\/strong><\/p>\n\n\n\n

      Security Shift Supervisor<\/strong>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2011 \u2013 2024<\/strong><\/p>\n\n\n\n

      Allied Universal Security Protection Service | National Academy of Sciences (NAS), Washington, DC<\/em><\/p>\n\n\n\n