• Worked directly with CISO to determine solutions to meet information security audits, penetration tests, risk assessments, and requirements from board of directors• Developed SIEM dashboards and alerts utilized by various departments and analysts (Splunk)• Firewall configuration and management• Managed and configured IDS/IPS systems • Managed and configured SSLVPN • Implemented Web Application Firewall, created and maintained SQL/XSS keyword databases based off of attacks detected by SIEM• Implemented and managed packet capturing solution• Trained employees on malware detection techniques involving packet inspection• Experience installing and developing ELK stack within AWS environment• Produced reports to department managers regarding 0-day exploits, and CVE vulnerabilities that were being publicly exposed• Conducted onsite penetration tests from an insider threat perspective

• Developed Threat Feed web application utilizing Nexpose API and FreeGeo IP API. Included function that worked contiguous to Firewall• Performed vulnerability scans on remote systems• Monitored and analyzed events generated from IDS/IPS (FireEye, SourceFire)• Analyzed system logs for events of unauthorized access to detect security threats, and vulnerabilities• Provided and developed Incident Response plan for infected systems and high risk assets• Created scripts to capture system data for litigation holds• Assessed vendor controls to comply with hospitals risk tolerance