Security operations · Cloud security · GRC

Felix Naroditskiy

Protecting data assets, ensuring compliance, and training users.

Cybersecurity professional working in security operations and incident response, with identity, cloud security, and governance work alongside it. A background in digital forensics and malware analysis, and the IT systems experience underneath all of it.

Felix Naroditskiy
NameF. Naroditskiy RoleCyber Security Analyst Based inWarminster, PA
Scroll
Focus
Security operations, incident response, identity and cloud security, and GRC
Based in
Warminster, PA. Remote, or hybrid near Philadelphia.
Degree
B.S. Cybersecurity Analytics and Operations, Penn State Abington
Certified
Security+ · SC-900 · AZ-900 · DP-900
01

Experience

Security operations, program, and governance work across a services company and an education startup, with the IT support experience underneath it.

TurnPoint Services Louisville, KY · Remote · 2026 to now
Current Oct 2026 to now

Cyber Security Analyst

Security operations · Incident response · IAM · Cloud security · GRC
  • Monitor and investigate security alerts across corporate cloud and network infrastructure, and lead and support incident response activities, investigations, and reporting.
  • Administer and strengthen identity and access management across corporate systems, including SSO configuration, access reviews, and user lifecycle management.
  • Support security architecture and configuration reviews for Azure and AWS cloud environments.
  • Help maintain alignment with NIST CSF 2.0, support regulatory compliance activities and company audits, and maintain security policies, procedures, and SOPs.
  • Conduct vendor and third-party security risk assessments, review security questionnaires and contract security terms, and contribute to security awareness for a primarily field-based workforce.
Stemuli Dallas, TX · Remote · 2023 to 2026
Prior Aug 2024 to Oct 2026

Cybersecurity Specialist

Security program · Privacy and AI governance · IAM · End-user support
  • Led a company-wide security program build-out: ran a NIST CSF 2.0 gap assessment across all six functions, prioritized findings into an engineering remediation queue, and built the policy and controls roadmap.
  • Owned COPPA/FERPA and AI governance for a K-12 platform, translating regulatory requirements into engineering criteria for PII blocking, age gating, and parental consent, and defining data-handling requirements for third-party AI vendors.
  • Conducted recurring security control reviews across cloud and SaaS platforms, including Microsoft 365, Google Workspace, Slack, and Notion, recommending IAM least privilege, MFA, encryption, and logging improvements, and analyzed vendor and school-district security questionnaires.
  • Architected segmented, identity-verified access for the student research community, delivered weekly security-awareness briefings and new-hire orientations, and provided first-line support for password resets, MFA enrollment, account access, and K-12 device recovery.
Prior Sep 2023 to Aug 2024

Cybersecurity and Technology Intern

Cloud security reviews · Data governance · Documentation
  • Conducted security reviews of AWS RDS, GCP, Azure, and SaaS platforms, assessing encryption at rest and in transit, IAM configuration, and compliance posture, and compiled results into a reusable review library.
  • Built team-specific security onboarding handbooks and an employee training handbook spanning cloud security, secure development, threat detection, and resilience.
  • Proposed data governance procedures aligned with CIS, NIST, COPPA, and FERPA under Zero Trust principles.
FEBA, LLC Pipersville, PA · 2020 to 2023
Prior Jun 2020 to Aug 2023

Technology and Computer Hardware Intern

End-user support · Windows · Hardware · VoIP · Networking
  • Provided end-user technical support in a small-business environment, diagnosing hardware and software issues and walking users through fixes to minimize downtime.
  • Set up and configured Windows PCs, including OS installation, software updates, patching, and troubleshooting.
  • Repaired and replaced hardware components, supported VoIP phone systems, and configured small-office networking, including routers, Wi-Fi, and cabling.
02

Capabilities

Skills, tools, and techniques I learn and use, from coursework to professional experience.

01Security operations
  • Alert monitoring and triage
  • Incident response and reporting
  • SIEM and log analysis
  • EDR, MDR, endpoint security
  • Threat detection and intelligence
  • MITRE ATT&CK, IOCs, IDS
02Digital forensics and malware
  • Digital forensics
  • Memory forensics
  • Network forensics
  • Malware analysis
  • Static and dynamic analysis
  • Vulnerability management
03Identity and cloud
  • IAM and least privilege
  • SSO and identity federation
  • Microsoft Entra ID
  • Microsoft Azure and AWS
  • Microsoft 365 security
  • Zero Trust, MFA, VPN
04Governance, risk, and compliance
  • Security program build-out
  • NIST CSF 2.0, RMF, CIS, ISO 27001
  • COPPA, FERPA, data privacy
  • Third-party risk (TPRM)
  • Audits, controls, risk assessment
  • Policies, SOPs, awareness training
05Security tooling
  • SentinelOne, Microsoft Defender
  • Splunk, Elastic (ELK)
  • Wireshark, tcpdump, Nmap
  • Autopsy, Volatility, FTK Imager
  • PeStudio, ProcMon, Regshot
  • Kali Linux, Snort, OSSEC
06Systems and networking
  • Active Directory: users, OUs, GPOs
  • Windows Server, Hyper-V, VirtualBox
  • Microsoft 365 and Google Workspace
  • Network security and traffic analysis
  • Firewalls, routers, Wi-Fi, VoIP
  • Cisco networking, Packet Tracer
07Automation and code
  • Python, Bash, PowerShell
  • SQL and Microsoft SQL Server
  • Java, JavaScript, HTML
  • Git
  • AI-assisted analysis and reporting
  • AI governance and acceptable use
08IT support
  • Help desk and end-user support
  • Remote support, device resets and recovery
  • Windows 10/11 install and setup
  • Password resets and MFA enrollment
  • Hardware troubleshooting, repair, PC building
  • Printers, peripherals, onboarding and offboarding
03

Education and certifications

The degree, the coursework behind it, and the certifications I have earned. Click a certification to verify and see what it covers.

B.S. Cybersecurity Analytics and Operations Pennsylvania State University, Abington · May 2026 · Summa Cum Laude
Relevant coursework