Security Analyst
Alabama Medicaid
Supporting security operations in public service, with a focus on threat detection, investigation, and response.
CYBERSECURITY · WETUMPKA, ALABAMA
Joey
Crysel.
Security analyst. Threat hunter.
I connect the dots between security data, attacker behavior, and the systems people depend on.
Healthcare · Public service · Enterprise ITTHE EXPERIENCE
01 / EXPERIENCE
Built from
the ground up.
From networks and infrastructure to investigating threats and building stronger defenses.
Information Security Engineer II
Baptist Health
Managed security platforms and turned endpoint, network, and identity telemetry into investigations, detections, and actionable intelligence.
- Served as the CrowdStrike subject matter expert across NG-SIEM, Fusion SOAR, endpoint protection, and identity protection.
- Built the threat intelligence program and established digital forensic investigation workflows.
- Led vulnerability management and coordinated remediation with infrastructure and application teams.
Systems Analyst I
Oracle Health
Supported Baptist Health IT Works and the incident response team across security operations and enterprise infrastructure.
- Performed endpoint threat triage, vulnerability scanning, and remediation coordination.
- Administered certificate services, single sign-on, endpoint patching, and VMware virtual servers.
Network Field Tech
Information Transport Solutions
Implemented and troubleshot Cisco wireless, routing, switching, and VoIP systems, with hands-on support for workstations and business IT environments.
02 / SELECTED WORK
Security put into practice.
Selected initiatives from my work at Baptist Health.
DETECTION ENGINEERING01
A clearer view
of the threat.
Led the migration from AlienVault to CrowdStrike NG-SIEM, bringing security events into a common platform for detection and investigation.
THE WORK
Log ingestion, normalization, detection rules, and security dashboards.
THREAT INTELLIGENCE02
Intelligence
with context.
Built and operationalized a threat intelligence program focused on the risks relevant to a healthcare environment.
THE WORK
Threat reporting, indicator enrichment, and intelligence to support threat hunting.
ACCESS & INFRASTRUCTURE03
Stronger foundations
for secure access.
Designed Cisco ISE network access control and implemented BeyondTrust solutions for privileged access.
THE WORK
Device profiling, wired and wireless 802.1X, privileged access, and a modernized certificate authority.
03 / EXPERTISE
Technical depth.
Practical application.
Detection & response
Threat hunting, incident response, detection engineering, log analysis, MITRE ATT&CK, and threat intelligence.
Digital forensics
Evidence collection, preservation, artifact analysis, and investigation workflows.
Security engineering
Vulnerability management, network access control, identity protection, and privileged access.
Infrastructure & automation
The systems knowledge to understand how an environment works and how to protect it.
04 / CREDENTIALS
A foundation in the craft.
Professional certifications and formal education.
GIAC
GCTI
Cyber Threat Intelligence
GIAC
GCFA
Certified Forensic Analyst
GIAC
GCFE
Certified Forensic Examiner
GIAC
GCIH
Certified Incident Handler
SECURITY BLUE TEAM
BTL1
Blue Team Level 1
COMPTIA
Security+
Security fundamentals
EDUCATION
Associate Degree, Computer Information Systems
Trenholm State Community College · May 2014
Related coursework
Cisco Networking Academy
CONTINUING EDUCATION
Currently studying for the CISSP.
LET’S CONNECT
Good security starts
with a conversation.
Connect with me about cybersecurity, threat hunting, and building better defenses.