Brandon M. Email & Phone Number

Des Moines, Iowa Area

• Technical lead for Operations Support on the Network Security Management team.• Project Lead responsible for the replacement of commercial IDS with custom network security monitoring sensors featuring full packet capture, network flow generation and signature based IDS and associated sensor and rule management application.• Deployed approx. 50 custom network monitoring appliances throughout the world.• Tune signature based IDS ruleset to ensure tailored inspection of observed network traffic• Tasked with discovering and responding to security incidents through the monitoring network traffic and analysis of device logs. Logs types included Active Directory, Linux and Windows Server, web proxy traffic, e-mail, DHCP, firewall, IDS/IPS, anti-virus, network routers/switches, web server logs, etc.• Administer SIEM implementations to handle log collection, incident creation and correlation rules• Evaluate, implement or create processes and tools to support the efforts a team of incident responsders• Work closely with other teams to implement firewall rules, block websites, implement traffic mirroring solution, DDoS mitigation strategy• Ensure systems supporting the Network Security Management team are operating correctly• Provide risk and threat notification by monitoring internal and external events, threats or incidents• Drive the continual improvement of the network security management team skills, toolset, and processes

• Worked on the managed device team to fulfill client requests regarding firewall configuration, maintenance, and management• Configured and managed client owned Juniper and Checkpoint firewalls• Created new user accounts and setup access control polices for Juniper SSL VPN• Worked closely with other security engineers to ensure client requests and expectations are met• Advised clients of best practice and security recommendations regarding firewall configuration• Provided firewall rulebase analysis to recommend rule changes• Configured and maintained several site-to-site VPNs• Responsible for management and configuration of new client firewall deployments• Preformed audit of existing client firewalls to find configuration issues and setup plans for remediation

Omaha, Ne

• Configuration and management of Nokia based Checkpoint and Juniper firewalls and associated management servers• Set up and maintained several Xen and VMWare based server for use by the security team• Responsible for all management servers used by the security team including syslog, policy and object audit server, SNMP monitoring, and several more.• Planned and implemented entire security infrastructure migration from Checkpoint to Juniper firewalls• Worked closely with developers to ensure in house applications were built using best security practices• Configured site-to-site VPNs with third party companies• Configured and maintained Juniper SSL VPN for employee secure remote access• Monitor for security incidents using IDP systems, Snort sensors, Firewall logs, etc• Responsible for all network perimeter security across all offices