Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Ebenezer Olaleye

Summary

Am a cybersecurity professional specializing in cloud security and infrastructure, with a broad expertise across various cybersecurity domains. With extensive experience in diverse industry sectors, Have gained valuable insights that enable me to deliver effective solutions. I excel in executing complex cybersecurity projects, including designing secure architectures, incident response, vulnerability management, data and hybrid migrations, comprehensive risk assessments, and threat mitigation. Also, I have a proven track record in implementing and supporting data security initiatives to ensure robust protection across cloud environments.

Overview

13
13
years of professional experience
1
1
Certification

Work History

Data Protection & Security Analyst

St Modwen Homes
02.2025 - Current
  • Risk Assessment & Reporting: Conducted over 30 in-depth risk assessments for various departments, providing actionable recommendations leading to 15% improvement in security policy enforcement and reduction in vulnerabilities across critical systems.
  • Access Control & Threat Response: Managed access controls for 550+ users, implemented identity verification processes, and responded to over 50 security incidents, reducing breach impacts by 25% and ensuring minimal operational disruption.
  • Collaboration & Incident Management: Led cross-functional teams to enhance system security, managing 12+ incident response activities. Ensured 100% compliance with industry standards, resulting in 20% reduction in system downtime due to security breaches.
  • Data Governance & Compliance: Spearheaded successful implementation of Microsoft Purview, configuring data classification and retention policies for over 10 TB of sensitive data. Achieved full GDPR, HIPAA, and other regulatory compliance, reducing audit preparation time by 30%.
  • Metadata Management & Data Cataloguing: Managed and categorized 15,000+ structured and unstructured data sources within Purview Data Catalog, improving data discoverability and traceability, increasing collaboration across teams by 40%.
  • Data Protection & Security: Designed and enforced data governance policies, including encryption, sensitivity labels, and DLP policies, protecting sensitive data and reducing risk of data breaches by 30%.
  • Integration & Automation: Integrated Microsoft Purview with Azure Synapse, SQL Server, and Power BI, automating metadata collection with Azure Data Factory for 5+ data sources. Streamlined data management processes, improving operational efficiency by 20%.

Email Security Engineer

Capita TSS
09.2024 - 02.2025
  • Migration & Configuration: Managed migration of email security from Forcepoint to Exchange Online Protection (EOP) for 3,500+ users, ensuring seamless transition for inbound and outbound filtering, advanced threat protection, and compliance policies, with zero downtime.
  • Deployment & Security: Deployed enterprise-level email security solutions, including Microsoft Exchange Email Security, safeguarding against phishing, malware, and business email compromise (BEC). Configured DKIM, DMARC, and SPF records for 100% prevention of spoofing incidents.
  • Advanced Threat Protection & Policies: Implemented advanced protection techniques, such as anti-phishing, anti-spam, safe attachments, and safe links policies, resulting in 40% reduction in successful email-based threats.
  • Collaboration & Compliance: Collaborated with internal teams to resolve 50+ email-related security incidents, configured email encryption for secure transmission, and established policies in line with industry standards and regulatory requirements, ensuring 100% compliance.
  • Incident Response & Threat Mitigation: Led response to over 30 email security incidents, investigating and mitigating phishing attacks and malware, reducing business disruption by 20%.
  • Continuous Monitoring & Improvement: Continuously monitored email security systems for emerging threats, identifying and mitigating 15+ vulnerabilities, and implementing improvements that enhanced security and ensured ongoing compliance with evolving standards.

IT Security Engineer - Cloud & Integration

Southern Housing Group
03.2023 - 08.2024
  • Cloud Security & Secure Posture: Enhanced cloud security, achieving secure score over 95% by implementing conditional access policies, MFA, and integrating Microsoft security stack to reduce attack surface.
  • Antivirus Migration & Threat Detection: Led migration from Sophos to Microsoft Defender for Endpoint XDR, optimizing threat detection and response for 2,000+ workstations.
  • Email Security Optimization: Assessed and optimized email security using ORCA scripts, ensuring compliance with Microsoft Defender for Office 365 best practices for anti-spam, anti-malware, and message hygiene settings.
  • Microsoft 365 E5 Security Tools: Configured and optimized E5 security tools to protect against phishing, identity theft, and data breaches, ensuring seamless integration with Microsoft 365 services.
  • Workload Migration to 365 E5: Supported migration of Microsoft security workloads to 365 E5, implementing advanced features like MDO, MDI, MDE, and MDA to enhance threat detection and response.
  • VPN Deployment & Zero-Trust: Supported deployment of Cato VPN for secure remote access, leveraging Zero-Trust strategy and application access control for hybrid and remote users.
  • Cloud Security Initiative & Zero-Trust: Played key role in Microsoft Cloud security initiative and implemented Zero-Trust principles, including just-in-time privileged access and Entra ID PIM for access control.

Cyber Security Analyst

WSP
10.2020 - 02.2023
  • Microsoft Defender Implementation: Played key role in implementing Microsoft Defender as core security component, enhancing endpoint protection as part of Microsoft-first strategy.
  • Security Baseline Configuration: Supported configuration of Microsoft security baselines for Windows 10 and 11, aligning with CIS benchmarks and Secure Score recommendations to strengthen endpoint security.
  • Threat Detection & Response: Collaborated with cross-functional teams using Microsoft Sentinel for advanced threat detection, quickly remediating breaches within Microsoft Zero Trust framework.
  • Data Security Strategy: Contributed to implementing Microsoft Purview Data Loss Prevention (DLP) and Microsoft Information Protection (MIP), advancing company’s data security strategy.
  • Email Security Management: Oversaw and optimized Proofpoint email security solutions, defending against phishing, malware, and other email-based threats while enforcing regulatory-compliant security policies.
  • Threat Intelligence & Incident Response: Monitored Proofpoint security events, led incident response efforts, and analyzed system performance to drive continuous improvements in threat prevention strategies.
  • Cross-Functional Collaboration & Security Adoption: Worked with teams to build modern security model supporting hybrid work, fortifying key business infrastructure, and aligning Microsoft security tools with compliance standards like PCI DSS, NIST CFS, and ISO frameworks.

Senior Infrastructure Engineer

Littlefish
04.2017 - 09.2020

Infrastructure Engineer

NHS Supply chain
10.2015 - 03.2017

Desktop Support Engineer

IQVIA
06.2014 - 09.2015

Support Engineer

Legal, General Insurance
11.2013 - 05.2014

Desktop Support Engineer

Mitie
04.2013 - 10.2013

Migration Engineer

Haringey Hospital
03.2012 - 03.2013

Service Desk Support

Lloyds Bank
10.2011 - 02.2012

Education

Computer Networking

University of East London
London

Skills

  • Azure Cloud Expertise: Extensive knowledge of Azure services, including Virtual Machines, Microsoft Defender for Cloud, Azure Monitor, Firewall, Virtual Networking, Azure Arc, and Conditional Access Policies Proficient in Azure Identity & Access Management, Entra ID Connect, and integrating Okta MFA for secure authentication
  • Email Security & Protection: Strong expertise in securing email environments using Exchange Online Protection, Microsoft Defender for O365, Mimecast Email Filtering, and authentication protocols (SPF, DKIM, DMARC) Skilled in using ORCA Script and Microsoft Advanced Threat Protection for threat assessments
  • Compliance, Data Governance & Risk Management:
    Experience with Microsoft Purview for data security, classification, DLP, and retention policies In-depth understanding of regulatory compliance, security audits, and alignment with global frameworks like CIS, ISO 27002, and NIST Proficient in using OneTrust for privacy management, third-party risk assessments, and automating compliance workflows to ensure data privacy and adherence to regulations such as GDPR, CCPA, and others
  • Endpoint Security Management: Hands-on experience with Microsoft Defender for Endpoint, Defender for IoT, and endpoint vulnerability management Skilled in Microsoft Defender XDR, Windows Security Baselines, MDM/MAM (Intune Management), and Microsoft Attack Surface Reduction strategies
  • Incident Response & Threat Detection: Expertise in utilizing Microsoft Sentinel for real-time threat detection, incident response, and collaboration with cross-functional teams Advanced skills in threat detection using Microsoft Defender for Endpoint and Defender XDR
  • Cloud Security & Zero Trust Implementation: Proven ability in securing cloud environments, integrating Microsoft Defender and Purview DLP, and implementing Zero Trust security models with Microsoft Security Tools and Identity Protection for hybrid cloud infrastructure security

Certification

  • Microsoft Certified Systems Engineer
  • Microsoft Azure Fundamentals (AZ-900)
  • Microsoft Security and Compliance Fundamentals (SC-900)
  • ITIL V3 Foundation
  • ISTQB (International Software Testing Qualifications Board)
  • Chartered Institute for IT

Timeline

Data Protection & Security Analyst

St Modwen Homes
02.2025 - Current

Email Security Engineer

Capita TSS
09.2024 - 02.2025

IT Security Engineer - Cloud & Integration

Southern Housing Group
03.2023 - 08.2024

Cyber Security Analyst

WSP
10.2020 - 02.2023

Senior Infrastructure Engineer

Littlefish
04.2017 - 09.2020

Infrastructure Engineer

NHS Supply chain
10.2015 - 03.2017

Desktop Support Engineer

IQVIA
06.2014 - 09.2015

Support Engineer

Legal, General Insurance
11.2013 - 05.2014

Desktop Support Engineer

Mitie
04.2013 - 10.2013

Migration Engineer

Haringey Hospital
03.2012 - 03.2013

Service Desk Support

Lloyds Bank
10.2011 - 02.2012

Computer Networking

University of East London
Ebenezer Olaleye