Steven J. Vik

Sound Transit — Seattle, WA  ·  Contract via Infojini

• Operated as primary SOC analyst in 24/7 enterprise environment monitoring 3,000+ endpoints across regional transit infrastructure
• Built Python automation for alert validation — reduced MTTR by 40%, eliminated false-positive fatigue across the analyst team
• Resolved 150+ security incidents per month via Splunk, SolarWinds, and Blackrock3 at 99.9% SLA
• Rebuilt ServiceNow ITSM workflows to match actual SOC escalation paths; authored SOPs that cut analyst onboarding time by 25%
• Maintained CJIS Level 4, HIPAA, and NIST 800-53 compliance with zero violations throughout the engagement

Joint Base Lewis-McChord — Tacoma, WA  ·  Contract via TEKsystems

• Hardened Windows 10 environments for 500+ DoD users via DISA STIG — reduced unauthorized access incidents by 25%
• Developed Splunk SIEM threat hunting protocols targeting lateral movement and privilege escalation; adopted as team-wide standard
• Built vulnerability management strategy combining CVSS severity with asset criticality; improved security posture metrics by 35%
• Deployed STIG baseline across all endpoints with zero service interruptions; enforced GPO-based controls and hardened AD configuration

Seattle University & City of Medina PD — Seattle, WA

• Secured hybrid operations for academic and law enforcement clients during COVID-19 continuity response
• Delivered CJIS-compliant endpoint security for 200+ users across both client environments
• Redesigned SolarWinds monitoring workflows — improved SOC efficiency by 20%
• Authored incident response playbooks adopted for cross-team knowledge transfer and onboarding

TES USA / Amazon Campus — Tukwila, WA

• Coordinated infrastructure audits across 20+ Amazon buildings — AV systems, Cisco hardware, and projector infrastructure
• Streamlined asset inventory documentation and developed improved tracking processes that shortened audit cycles and improved equipment accuracy