Threat detection and response
Proactive monitoring with SIEM and EDR platforms. Tristan writes detection rules, tunes alerts and leads the response when a threat turns up.
Tristan Nelson
Senior Security Analyst
Erie, Pennsylvania · Sentiva Solutions
Tristan Nelson is a Senior Security Analyst at Sentiva Solutions, based in Erie, Pennsylvania. He holds five active certifications, including the CISSP, CEH, CompTIA CySA+, Security+ and Microsoft SC-200, and brings deep technical knowledge to every security engagement.
He leads security work for Sentiva's clients across the country, from building zero-trust architectures to running incident response. His approach is methodical and proactive, and it starts from a simple fact: most breaches can be prevented.
Quick facts
- Company
- Sentiva Solutions
- Location
- Erie, Pennsylvania
- Title
- Senior Security Analyst
- Certifications
- CISSP, CEH, CySA+, Security+, MS SC-200
- Specialties
- Threat Detection, Incident Response, Zero Trust
- Compliance
- HIPAA, SOC 2, CMMC, PCI-DSS
Areas of expertise
What Tristan actually does.
01
02
Penetration testing
CEH-certified offensive testing that finds weak spots before attackers do. Internal, external and social engineering assessments with detailed fix-it reports.
03
Compliance programs
End-to-end HIPAA, SOC 2 Type II, CMMC and PCI-DSS programs, from gap analysis to audit readiness.
04
Security architecture
Zero-trust network design, IAM frameworks and layered defenses that grow with the organization.
05
Microsoft security stack
Deploys and manages Microsoft Sentinel, Defender XDR, Defender for Endpoint and Conditional Access for clients on Microsoft.
06
Security awareness training
Phishing simulations and live training that measurably lower click rates and build a better security culture.
07
Incident response
When a breach happens, Tristan leads containment, forensics, cleanup and recovery.
08
Vulnerability management
Ongoing scanning, triage and remediation tracking, with patching prioritized by risk across every managed environment.
09
Cloud security
Securing AWS, Azure and hybrid environments against misconfigurations, identity attacks and cloud-specific threats, including CIS Benchmark hardening.
Certifications
Industry-recognized credentials.
Five active certifications from the most respected bodies in cybersecurity.
CISSP · ISC2
Certified Information Systems Security Professional
The best-known certification in security. It covers all eight CISSP domains: security architecture, risk management, cryptography, network security, access control, software security, operations security and business continuity.
CEH · EC-Council
Certified Ethical Hacker
Proves the ability to think and act like an attacker. Covers penetration testing, vulnerability scanning, social engineering, malware analysis and hands-on exploitation.
CySA+ · CompTIA
CompTIA Cybersecurity Analyst
Covers using behavioral analytics to detect and fight threats, along with threat intelligence, security operations, vulnerability management and incident response.
Security+ · CompTIA
CompTIA Security+
The DoD-approved baseline security certification: core security concepts, network hardening, cryptography, PKI, identity management and risk analysis.
SC-200 · Microsoft
Microsoft Security Operations Analyst Associate
Microsoft's certification for analysts working with Sentinel, Defender XDR and the rest of the Microsoft security stack. Important for clients on Microsoft.
Background
Built for the work that matters.
Tristan grew up in Erie, PA and has spent his career in the region, earning a reputation as one of the most capable security professionals in western Pennsylvania.
Before joining Sentiva, he led security operations for a regional healthcare network with 8 facilities and 1,200+ endpoints. After a near-miss ransomware event he rebuilt their security program: zero-trust architecture, full HIPAA compliance and an attack surface cut by more than 70%.
At Sentiva he brings that experience to businesses of every size, from a 10-person dental office to a 300-person manufacturer.
Active certifications
- CISSPCertified Information Systems Security ProfessionalISC2Active
- CEHCertified Ethical HackerEC-CouncilActive
- CySA+CompTIA Cybersecurity AnalystCompTIAActive
- Security+CompTIA Security+CompTIAActive
- SC-200Microsoft Security Operations Analyst AssociateMicrosoftActive
Industries served
- Healthcare and medical practices
- Legal and law firms
- Financial services and accounting
- Manufacturing and industrial
- Professional services
- Nonprofit organizations
- Government contractors (CMMC)
Also on the team