Here it is: ```html Maxine Jones Portfolio
Maxine Jones profile picture

Hello, I'm

Maxine Jones

GRC Analyst | Risk & Compliance Analyst

🏆 NCL — #1 Midwest Regional (out of 26) 🥉 Google Black CS Summit Hackathon — 3rd Place

Get To Know More

About Me

Experience

2 Years
GRC, Cybersecurity & IT Systems

Education

Chicago State University — B.S. Computer Science (3.3 GPA)
President — Computer Science Club
President — WiCyS Chapter
Founder — Girls Who Code College Loop
Member — National Council of Negro Women

West Virginia University
M.S. Business Cybersecurity Management (In Progress, 4.0 GPA)

Governance, Risk, and Compliance analyst focused on cybersecurity compliance programs, risk assessments, control testing, and audit support. Experienced across NIST 800-53, ISO 27001, SOC 2, and HIPAA frameworks, with hands-on work in evidence collection, policy development, vulnerability management, and security awareness program delivery for enterprise and nonprofit environments.

Explore My

Experience

Professional Experience

Cyber Resilience Fellow — West Virginia University CRRC

August 2024 – Present

  • Develops and delivers cybersecurity compliance training for small businesses, nonprofits, and local governments across West Virginia critical infrastructure, including SOC 2 Compliance Awareness and Account Takeover courses aligned to NIST CSF, SOC 2 Trust Services Criteria, and CISA guidance.
  • Builds security awareness programs covering phishing, MFA, password security, privacy operations, and social engineering for non-technical audiences of 50+ member organizations.
  • Translates regulatory and security requirements into plain-language policies, guidance, and training materials, contributing to documentation for security standards aligned to CISA best practices.

CRM Systems Analyst Intern & Project Lead — Bridle Paths

January 2025 – Present | Leesburg, VA (Remote)

  • Leads a six-person team implementing a 54-module Zoho CRM platform for a HIPAA-regulated therapeutic riding nonprofit, serving as primary project manager and compliance lead.
  • Conducted an end-to-end compliance audit of the platform, authoring the engagement's first audit plan, assessing 1,100+ fields against the HIPAA compliance specification, and identifying 10 control gaps before go-live.
  • Documented findings with risk ratings and remediation recommendations, coordinating corrective actions to closure and producing governance documentation and automated dashboards as audit evidence.

Risk Analyst Intern (Vulnerability Management) — United Airlines

May 2024 – August 2024

  • Triaged 10,000+ Qualys vulnerability findings against NIST SP 800-53, scoring each by likelihood and business impact to risk-rank remediation across high-criticality assets.
  • Translated scan data into risk-based remediation plans mapped to asset owners and maintained POA&M-style tracking within the ISO 27001 framework to support a quarterly audit cycle.
  • Developed compliance documentation and dashboards aligned to NIST 800-53 control families to communicate compliance posture to leadership.

Cybersecurity Hackathon Organizer — Chicago State University

January 2025 – April 2025

  • Organized cybersecurity hackathon for 50+ high school students.
  • Coordinated logistics, faculty collaboration, and event materials.

Technical Skills

GRC & Compliance

NIST 800-53, ISO 27001, SOC 2, HIPAA, Risk Assessment, Control Testing, Evidence Collection, Policy Development, POA&M

Identity & Access Management

Microsoft Entra ID, RBAC, MFA, Conditional Access, Least Privilege, Zero Trust

Vulnerability Management

Qualys, Risk Prioritization, Patch Analysis, Remediation Tracking

SIEM & Detection

Splunk, Wazuh, Log Analysis

Incident Response

Threat Investigation, Endpoint Analysis, MITRE ATT&CK

Programming

Python, Bash, SQL

Browse My

Projects

Featured Cybersecurity Projects

Enterprise GRC Program & Risk Management Framework

NIST | ISO 27001 | SOC 2 | PCI DSS | COBIT

Designed an enterprise governance, risk, and compliance program for a simulated fintech environment, aligning business risk management with security controls, recovery planning, and regulatory expectations across multiple frameworks.

Key Metrics: 18-month GRC roadmap developed | quantitative risk register created using SLE, ARO, and ALE | multi-framework mappings across NIST CSF, ISO 27001, SOC 2, PCI DSS, GLBA, FFIEC, and COBIT

Tools: NIST CSF, NIST SP 800-30, NIST SP 800-34, ISO 27001, COBIT 2019

Focus: Risk assessment, compliance mapping, business continuity, security governance, evidence collection

Deliverables: Risk register, DR/BCP plans, governance model, control library, Statement of Applicability, implementation roadmap

Azure AD Incident Response & Zero Trust Lab

Microsoft Entra ID | Conditional Access | Identity Security

Built a cloud identity security lab to simulate suspicious sign-in and account compromise scenarios using Microsoft Entra ID. Designed and tested Zero Trust controls to strengthen identity protection and reduce unauthorized access risk.

Key Metrics: 5 Conditional Access policies implemented | MFA enforcement tested | legacy authentication blocked | location- and device-based access restrictions validated | 350+ alerts investigated

Tools: Microsoft Entra ID, Conditional Access, MFA, Salesforce SSO, Intune concepts

Focus: Identity security, Zero Trust policy enforcement, suspicious sign-in investigation

Deliverables: Incident response report, policy testing results, remediation recommendations

Layered Network Security Monitoring & Fusion Detection Framework

Suricata IDS | Cowrie Honeypot | Splunk SIEM

Built a layered detection and deception architecture that combined Suricata network alerts, Cowrie honeypot telemetry, and Splunk correlation dashboards to investigate exploit attempts, brute-force logins, malware retrieval, and persistence activity across the attack lifecycle.

Key Metrics: 307,708 total observed attack events | 30,649 high-severity exploit attempts | 18 confirmed multi-stage kill chains | 109 persistence attempts | 60 unique malware payloads

Tools: Splunk, Suricata, Cowrie, MITRE ATT&CK

Focus: Detection engineering, alert correlation, incident response, attack progression analysis

Deliverables: Correlation dashboards, executive-level security metrics, incident response playbooks

Endpoint Incident Response & Lateral Movement Analysis

Windows Forensics | Procmon | Endpoint Investigation

Performed an endpoint incident response investigation using Procmon to analyze process, file, and registry activity associated with a suspected compromise. Traced multi-stage infection behavior and lateral movement indicators to support containment and remediation planning.

Key Evidence: Multi-stage infection behavior identified | suspicious process execution analyzed | abnormal file creation patterns reviewed | registry activity investigated for persistence indicators

Tools: Procmon, Windows endpoint telemetry, forensic analysis workflow

Focus: Endpoint triage, malware behavior analysis, lateral movement investigation

Deliverables: Incident response report, findings summary, prioritized remediation actions

TPOT-CIC Fusion Intrusion Detection System

Machine Learning IDS | T-Pot Honeypot | CIC-IDS Dataset

Developed a hybrid intrusion detection system that fused honeypot telemetry from T-Pot with machine learning pipelines trained on CIC-IDS data. Used automated model generation to improve malicious traffic classification and support SOC-oriented threat analysis.

Key Evidence: Combined live honeypot telemetry with benchmark intrusion dataset | automated optimized ML pipelines for attack classification | designed to improve visibility into malicious traffic patterns

Tools: Python, TPOT AutoML, T-Pot, CIC-IDS, Splunk

Focus: ML-based intrusion detection, network threat classification, security analytics

Deliverables: Detection pipeline, project report, security visualization support

Academic Projects

Network Traffic Risk Assessment Using Simulated Attacks

West Virginia University — CYBR 530

Built a Python-based network monitoring system to simulate SYN flood and ICMP sweep attacks, log packet activity into SQLite, and apply NIST-based risk scoring to detected network threats.

Key Metrics: Logged 3,000+ packets into SQLite during attack simulation

Tools: Python, SQLite, packet analysis, NIST-based risk scoring

Focus: Network monitoring, threat simulation, risk assessment

Quantitative Risk Assessment

West Virginia University — CYBR 525

Conducted a quantitative risk analysis using SLE, ARO, and ALE calculations to assess business impact and support risk-based decision-making aligned with NIST SP 800-30.

Tools: Risk quantification methodology, NIST SP 800-30

Focus: Quantitative risk analysis, business impact evaluation

Deliverables: Risk calculations, analysis document, recommendations

IT Audit Planning Project

West Virginia University — CYBR 510

Developed an IT audit planning document focused on vulnerability management and control review, incorporating NIST CSF 2.0 and NIST SP 800-171 concepts to support structured audit preparation.

Tools: NIST CSF 2.0, NIST SP 800-171

Focus: Audit planning, control assessment, vulnerability management review

Deliverables: Audit plan, scope definition, control mapping

Security Reports & Deliverables

Professional-grade incident reports and security documentation produced as part of hands-on investigations.

Security Incident Report — Azure AD Credential Compromise

Incident ID: INC-2026-0322-001 | Severity: HIGH | Status: Contained

Formal incident report documenting a vishing-based credential compromise of a Microsoft 365 account. Covers full attack narrative, Entra ID sign-in log analysis, MITRE ATT&CK mapping, Zero Trust remediation actions, IOCs, and executive business impact assessment.

Scope: Cloud identity compromise, unauthorized group creation, privilege escalation attempt

Frameworks: MITRE ATT&CK (T1566.004, T1078, T1098, T1069), Zero Trust, NIST CSF

Deliverable: Executive-level incident report with full log evidence, IOCs, and remediation steps

MDR Executive Report — Endpoint Malware & Lateral Movement

Client: Lumen Soda, Inc. | Prepared for: CEO | Role: Junior MDR Analyst

Executive-level MDR report delivered to a CEO summarizing a multi-stage malware infection, lateral movement to a remote host, and ransomware-style file creation. Translates forensic Procmon findings into clear business impact, root cause, and actionable remediation steps.

Scope: Dropper execution, second-stage payload, lateral movement to ADMIN-21139, remote file impact

Tools: Sysinternals Procmon, Windows endpoint forensics

Deliverable: Non-technical executive summary with prioritized remediation recommendations

My Credentials

Resume & Certifications

Resume

Certification

CompTIA Security+ (SY0-701)

Get in Touch

Contact Me

maxinejones2015@gmail.com

LinkedIn

```