PAUL D. IVISON
Fareham,Hampshire
Summary
Experienced Tier 2 Cyber Threat Analyst and SOC Shift Lead with 5 years' expertise in complex incident investigations and risk assessments within 24/7 SIEM environments. Leads SOC operations, ensuring SLA adherence and high standards in incident triage and escalation. Translates technical findings into actionable intelligence for stakeholders and mentors Tier 1 analysts to enhance investigation workflows. Directs threat hunting and correlates alert data to mitigate risks and protect client networks.
Overview
1
1
Certification
20
20
years of professional experience
Work History
Tier 2 Cyber Threat Analyst / Shift Lead
DXC Technology
2023.01 - 2026.09
- Direct 24/7 SOC shift operations to maintain strict SLA adherence and oversee routine SIEM health checks, ensuring high-quality incident triage and escalation standards across all client environments.
- Acted as the primary technical point of reference for Tier 1 analysts, conducting deep-dive investigations, performing comprehensive risk assessments, and translating complex threat data into actionable mitigation guidance.
- Manage national security clearance access requests and onboarding pipelines to ensure team members gain operational access to client environments efficiently without operational delays.
- Supported team onboarding by guiding junior analysts through established company training processes in SIEM navigation, investigation methodology, and security workflows, successfully guiding multiple Tier 1 analysts to secure promotions to Tier 2 roles.
Tier 1 Threat Analyst
DXC Technology
2021.03 - 2023.01
- Monitored multi-SIEM 24/7 environments, performing rapid initial triage and analysis on high-volume security alerts to enhance threat detection across diverse enterprise networks.
- Prioritised real-time security events under pressure, ensuring zero critical alerts lapsed during high-volume operational periods by maintaining high accuracy and speed in line with strict service level agreements.
- Analyzed malicious traffic patterns, phishing campaigns, and endpoint anomalies to isolate compromised assets and prevent threat lateral movement across client networks.
- Authored concise incident tickets that translated complex log data into actionable threat narratives, providing initial risk scores and precise remediation guidance to facilitate swift incident response.
Senior Claims Handler & Claims Specialist
Ageas Insurance & DWA Vehicle Hire
2013.03 - 2021.03
- Acted as Fraud Specialist and Recoveries Champion, receiving recognition for effective cost recovery, fraud mitigation, and successful negotiation with third-party insurers, police, and legal representatives.
- Managed high-volume caseloads by reconstructing complex event timelines, analysing police and legal documents under tight deadlines, and evaluating conflicting data to ensure accurate claims processing.
- Operated under strict regulatory deadlines, ensuring SOC SLA compliance while communicating with external stakeholders to produce clear, defensible threat reports.
- Built a successful career transition into SOC Analysis rooted in over 8 years of experience in root-cause investigation, rapid triage, and evidence-based decision-making.
Third Party Intervention & Sales Specialist
Innovation Group Motorcare
2006.05 - 2013.02
- Maintained a permanent conversion rate above 50% through effective sales communication, negotiation, and service positioning.
- Executed direct outreach and negotiation to provide hire and repair services to non-fault third parties, reducing credit hire and repair exposure for client policyholders.
- Achieved 96% adherence to strict Service Level Agreements (SLAs) across claims processing, working directly with corporate clients to audit workflows and guarantee SLA targets.
- Oversaw compilation of daily operational reports for corporate clients, creating baseline metrics in operations, triage, and reporting.
Education
Customer Service Level 2 - Fraud Recognition Training
2002-01
Skills
- Cybersecurity & Operations: Microsoft Sentinel, Kusto Query Language (KQL), Microsoft Defender XDR, ArcSight, Splunk, Log Analysis, Incident investigation, SLA oversight, Threat detection, SOC Orchestration, Syslog, AWS CloudTrail, ITIL & MITRE frameworks, KeePass (TOTP/MFA)
- Investigation, Risk & Compliance: Root cause analysis, Timeline reconstruction, Liability Investigation, Fraud prevention, Cost Recovery, Regulatory Compliance
- Leadership, Sales & Strategy: Shift Operations Management, Team onboarding, Stakeholder Negotiation, Sales conversion, Operational reporting
- Incident reporting
- SIEM monitoring
- Threat triage
- Log analysis
- Incident escalation
- Shift leadership
- Critical thinking
- Team mentoring
- Written and verbal communication
- Decisive under pressure
- Auditing
EDUCATION & QUALIFICATIONS
- Splunk Power User Training: Completed February 2026.
- Chartered Insurance Institute (CII): IF1 Achieved.
Certification
- DV Clearance
Timeline
Tier 2 Cyber Threat Analyst / Shift Lead
DXC Technology
2023.01 - 2026.09
Tier 1 Threat Analyst
DXC Technology
2021.03 - 2023.01
Senior Claims Handler & Claims Specialist
Ageas Insurance & DWA Vehicle Hire
2013.03 - 2021.03
Third Party Intervention & Sales Specialist
Innovation Group Motorcare
2006.05 - 2013.02