Managing and investigating large scale sophisticated attacks, conducting log analysis, and host/network artifact analysis. Participating in threat hunting: proactively hunting for targeted attacks and new emerging threats in client networks; as well as security assessments and simulations.Identifying indicators of compromise(IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred.Performing basic static and dynamic malware analysis.Generating and presenting comprehensive and professional reports of findings from investigations.

Incident response, data forensics, and security operations.

Providing consulting and assessments for various customers compliance needs; PCI, HIPPA, CMMC, and SOC compliance.Deploying and managing security services to customers. Including SIEM/SOC capabilities, EDR systems, patching, vulnerability scanning, simulated phishing campaignsWorking with project and account managers to harden customers security services to ensure best practices and various compliance needs are being met. Managing and responding to security alerts for managed customers from SIEM/SOC/EDR platforms.Expanding the companies MSSP offerings and solutions by integrating new vendor partner relationships and technologies.

Developing, implementing, and maintaining MSSP services to the local SMB market

Responsible for running daily operations at a data center co-location for a company with over 70 remote sites.

responsible for all end user technology PC, Desktop, Installation and support of proprietary systems.

Monitoring of switches, servers, firewalls, DDOS/DOS attacks, WAN connectivity and outages