Open to New Opportunities

Steven Hosek Network & Security Ops Technician

New York, NY

Seeking SOC Analyst, Network Security Analyst, or Infrastructure Security roles with an internal IT / security team. Remote preferred.

5 yrsin 24x7 NOC operations

10+client organizations

150+sites, including data centers

50+alerts actioned per 12-hour shift

Professional Summary

Network and security operations for live production environments.

I work in a managed services NOC supporting education, municipal, and commercial clients. Day to day I triage security events and alerts, handle incident response and phishing analysis, isolate faults across network, identity, endpoint, and server layers, and work authentication and connectivity issues through to resolution or a clean escalation. I support maintenance windows, keep clients and vendors informed during incidents, and write handoffs people can act on. I do my best work when a problem is noisy or spans several teams and needs a clear path forward. I also work routinely with AI tools (ChatGPT and Codex, Claude and Claude Code, Gemini) and have been experimenting with running open-weight models in my home lab.

Experience

Professional Experience

NOC Technician I

Sourcepass · Bohemia, New York · On-site

Oct 2021 – Present

Monitor and support network and security operations for 10+ client organizations across 150+ sites, including data centers, triaging and actioning 50+ alerts per 12-hour shift.
Triage security events with incident response playbooks, correlating SIEM, firewall, and endpoint logs and checking IOCs to separate false positives from real impact.
Analyze phishing and email threats in Defender for Office 365 and Proofpoint, investigate endpoint alerts in FortiEDR and Cylance, and run threat hunts in Microsoft Sentinel and LogRhythm.
Troubleshoot site-to-site VPNs, firewall policies, routing, BGP, and WAN connectivity across Fortinet, Palo Alto / Panorama, Cisco, and Meraki, plus 802.1X / Cisco ISE.
Support vulnerability remediation, upgrade planning, and certificate maintenance for Cisco IOS XE, Nexus, CUCM / Unity / CER, Windows Server / AD, VMware, Nutanix, and NetScaler.
Own tickets end to end in ConnectWise, coordinate vendor TAC and ISP escalations, keep clients updated during incidents, and validate service restoration.

Service Desk Analyst (Raytheon contract)

DXC Technology · Holbrook, New York · Remote

Jun 2021 – Oct 2021

Provided Level 1 service desk support in a security-sensitive defense contractor environment, including executive and VIP users.
Resolved identity, MFA, and access issues involving smart cards, hardware tokens, and software tokens under strict security procedures.
Logged, prioritized, and escalated incidents in ServiceNow with clear diagnostic notes, and flagged repeat issue trends.

Help Desk Analyst (The Freeman Company contract)

Infogain · Holbrook, New York · Remote

Apr 2021 – Jul 2021

Provided Level 1 and 2 support by phone, chat, and email in a high-volume enterprise environment.
Handled account, group, and mailbox requests in Active Directory, Exchange, Office 365, and Okta.
Troubleshot SAP, Five9, Google Workspace, Box, Zoom, and Citrix for remote users, escalating with clear summaries.

Specialist

Apple · Lake Grove, New York

Oct 2019 – Feb 2020

Helped customers choose and set up Apple devices and services after completing Apple's customer support training in New York City.

Home Lab

What I run outside of work

FortiWiFi

Edge firewall and Wi-Fi access point. Each Proxmox host sits on its own /24 segment, and firewall policies control traffic between segments, along with device quarantine rules. DNS filtering runs through AdGuard Home.

Virtualization & Backup Lab

Three-host Proxmox environment running VMs and containers, with Proxmox Backup Server writing to a mounted Windows SMB share.

Proxmox VE
Proxmox Backup Server
Debian / Linux
Windows SMB

Infrastructure Monitoring Lab

Dashboards, alert rules, and service availability checks for lab hosts and services.

Prometheus
Alertmanager
Blackbox Exporter
Grafana
Netdata

Network Security & Remote Access Lab

Segmented network with firewall policies, device quarantine rules, DNS filtering, and remote access.

FortiWiFi
VLANs
AdGuard Home
Tailscale

Identity & PKI Lab

Active Directory with two domain controllers, single sign-on, an internal certificate authority, and a reverse proxy serving TLS for every internal service. Secrets live in a self-hosted vault.

Active Directory
Authentik
step-ca
Caddy
Passbolt

Skills

Platforms and tools I work with

Security Operations

Incident response
Alert triage
Phishing analysis
IOC investigation
Threat hunting
Vulnerability management
SOAR playbooks
NIST

Firewalls

FortiGate
FortiAnalyzer
Palo Alto / Panorama
Cisco FMC

Endpoint & Email Security

FortiEDR
Cylance
Defender for Office 365
Proofpoint

SIEM & Monitoring

LogRhythm
Microsoft Sentinel
Splunk
OpsGenie

Networking

Cisco IOS / IOS-XE
Cisco Nexus
Meraki
BGP
VLANs
GRE / IPsec VPN
DHCP / DNS

Identity & Access

Active Directory
Cisco ISE
RADIUS / 802.1X / MAB
PKI & Certificates
Smart Card & MFA

Systems & Virtualization

Windows Server
Linux
VMware vCenter
Nutanix Prism
Proxmox
SQL Server
NetScaler
Microsoft 365
PowerShell / Bash

Voice & Video

Cisco CUCM / Unity / CER
SIP
E911 / ELIN
Milestone XProtect

ITSM & Documentation

ConnectWise
ServiceNow
IT Glue

AI Tools

Prompt engineering
ChatGPT / Codex
Claude / Claude Code
Gemini
Self-hosted open-weight models

Certifications

Fortinet FortiGate 7.6 Operator
Earned
Cisco CCNA
In progress

Contact

Direct Contact

Open to new opportunities. Email is the best way to connect.

Emailsteve@stevenhosek.dev

LinkedInlinkedin.com/in/stevenhoseknyc