Application Threat Monitoring and Log Analysis.

- I am the lead SIEM engineer, tasked with developing and maintaining LogRhythm dashboards, alerts, reporting, and analysis. I facilitate log ingestion and create automated responses for conditional alerts and alarm conditions.- Review and generate user access reports required for numerous audits, such as SOX, and SOC 2 to maintain compliance with HIPAA and GLBA (AD, SQL, SharePoint, and Azure). I also develop monitoring solutions for privileged user access while managing access across the local AD domain, cloud, and VPN- Monitor and remediate alerts in Microsoft Defender, Cloud App Security, and SentinelOne. Perform threat analysis in Sandbox, and tune dashboards across all EDR and IPS platforms (Malware, DLP, etc...)- Develop and implement information security policies and procedures and communicate them with the security and infrastructure team as needed- Manage and review user group internet domain access in proxy (ForcePoint)- Provide vulnerability management via scans (Tenable, Defender ATP, SentinelOne) and working with infrastructure team when necessary on their remediation (GPO changes, system updates, etc...)- I also conduct a phishing campaign every 2 months for users across the globe, complete with assigned security training for those that fail- Research and review emerging security tools that would benefit the company

- Managed, and deployed security tools, such as HIDS and SIEM (Wazuh), and endpoint protection (Cylance)- Performed threat hunts based on newly exposed security threat research and active malware campaigns- Respond to and remediate incidents based on escalated security events from our threat monitoring systems- Reviewed security logs daily, which included endpoint protection status, firewall changes, VPN access, privileged account use, incident detection and response, payment card information and sensitive data scans, etc.- Performed monthly and quarterly security review tasks, such as account access across systems (domain, SQL, and cloud), security tools, and password policies in order to improve overall security posture- Conducted vulnerability scans across all networks and applications, then facilitated remediation after reviewing results- Created, managed, and analyzed security reports and dashboards using SIEM and FIM systems- Worked with a team to review and test commercial security tools that would benefit core business operations- Helped maintain Payment Card Industry Data Security Standard (PCI-DSS) and Payment Application Data Security Standard (PA-DSS) compliance by implementing appropriate security standards and providing evidence during audits when requested

- Worked with both internal and external business owners and development teams to create business rules and systems logic for in-house applications, data management, and workload automation- Led project teams in an Agile SCRUM environment by ensuring developers, architects, and QA had everything they need in order to complete their respective parts- Monitored critical systems to support both internal and external customers via on-call production support- Prepared detailed documentation and data models for numerous in-house applications, both front and back-end- Facilitated user acceptance testing for user stories and composed the acceptance criteria on which a change would be deemed successful

- Worked with multiple data teams to create and deliver user stories- Worked with other Interns on development of our own in-house parking lot application- Completed IT Technical Boot Camp to develop SQL and C# development skills using the AGILE development framework

• Provided systems administration support for Windows and Mac OS systems and network devices • Provided professional communication with both technical and non-technical customers via email, phone, and in person. • Successfully completed setup of over 300 work stations during migration to new facilityo Included Windows, Mac, servers, and projectors • Provided Tier 1 Helpdesk support for clients such as hardware replacement, printer maintenance, and virus removal using diagnostic and repair skills. • Maintained up-to-date documentation processes, and physical inventory with minimal supervision.