Oluwatobi Awolude

SOC Analyst and Cloud-capable IT Security professional with 5+ years running enterprise security, cloud, and network operations across Microsoft Sentinel, Defender XDR, Azure, and Entra ID. Operates a global Tier 2 / Tier 3 SOC single-handed with zero supervision, closing 20+ tickets a day at a 30-minute MTTR while handling daily phishing cases for a worldwide user base. Authors KQL detections, drives Tenable-led vulnerability remediation in line with ISO 27001 and GDPR, and brings a strong cloud engineering foundation with hands-on Terraform, Azure DevOps, Docker, and CI/CD. Looking for a Cybersecurity, IT Security, or Cloud Engineer role where proactive detection and automation have direct business impact.

1. IT Analyst, Security (SOC Analyst)

   Jan 2025 – Present

   Mott MacDonald · Newcastle, UK (Hybrid)

   • Close 20+ tickets per day at a 30-minute MTTR as an independent Tier 2 / Tier 3 analyst across Sentinel, Defender XDR, and Zscaler — owning every alert from triage to review.
   • Respond to daily phishing cases for the global user base: analyse headers and payloads, extract IoCs, purge mailboxes, and harden detections to stop repeat campaigns.
   • Engineer custom KQL detections and hunt packs that surface threats default rules miss — raising detection quality across identity, endpoint, and network telemetry.
   • Drive vulnerability management in Tenable Nessus: scope scans, track remediation with asset owners, and validate fixes to keep the risk register clean.
   • Tighten identity and privileged access through Entra ID Conditional Access and BeyondTrust session monitoring, reducing standing privilege exposure.
   • Produce control evidence for ISO 27001 and GDPR, mapping SOC activity to audit requirements.
   • Treat detection content as code: version-controlled in Git and deployed through Azure DevOps Pipelines for repeatable rollouts.
2. IT Analyst, Application and Cloud Support

   Apr 2023 – Mar 2025

   Mott MacDonald · Newcastle, UK (Hybrid)

   • Delivered L3 support across Microsoft 365, Azure, ServiceNow, AutoDesk, and Bentley for a global engineering user base — protecting uptime on critical platforms.
   • Hardened Intune, Autopilot, and Entra ID configurations, rolling out Conditional Access, device compliance, and zero-touch provisioning.
   • Troubleshot Azure App Services, virtualisation, and identity issues alongside platform teams to unblock upgrades and integrations.
   • Wrote knowledge-base articles, runbooks, and process flows that cut repeat tickets and lifted first-time fix rates.
   • Partnered with security on escalations and early Defender adoption — which led to my internal move into the SOC role.
3. IT Support Engineer, 2nd & 3rd Line

   Oct 2021 – Mar 2023

   BT / EE via Hays Talent Solutions · Gosforth, North Tyneside & Remote

   • Supported 5,000+ BT and EE users across UK call centres and remote sites — hitting SLAs on Windows 10/11, Microsoft 365, VPN, and Active Directory incidents.
   • Provisioned users and devices through AD and Intune, enforced Group Policy and Conditional Access baselines, and executed Windows patching through SCCM.
   • Acted as backfill engineer across UK sites for upgrades, new-site rollouts, and decommissioning projects.
   • Worked with the cybersecurity team on phishing triage, access reviews, and incident escalations — sharpening the security mindset I use in the SOC today.
4. IT Analyst, Remote Infrastructure & Cloud

   May 2019 – Sep 2021

   Naynav Engineering Services · Newcastle, UK (Remote)

   • Delivered infrastructure and cloud support for a remote workforce, covering Intune policies, Conditional Access, and Microsoft 365.
   • Performed compliance checks and helped implement cloud security policies across Entra ID and Azure workloads.
   • Documented SOPs and onboarding guides that reduced repeat queries and scaled operational knowledge.
5. NOC Engineer & Network Surveillance Specialist

   Sep 2017 – Apr 2019

   Biswal Telecoms · Lagos, Nigeria

   • Monitored telecom networks 24×7, triaged critical alarms across regions, and coordinated field engineers to hit MTTR and SLA targets.
   • Produced incident reports and shift handovers that kept the NOC synchronised and customer-facing services stable.
   • Built the TCP/IP, routing, and fault-management fundamentals that still underpin how I investigate today.

In view: CompTIA Security+ · Microsoft MD-102 · Microsoft AZ-900 · ServiceNow Admin