Charles Besenhoffer Email & Phone Number

Wheeling, Il, Us

Burlington, Massachusetts, Us

Chicago, Illinois, Us

Primary Activities:Incident Response & Threat Hunting, Security Monitoring Content Development, Systems Security Analysis & EngineeringIR & TH: - Coordinate response activity and procedures with partner organizations- Perform followup investigation and deep dives into security incidents and events - provide feedback and coaching- Leverage threat intelligence and knowledge of adversary techniques to proactively hunt for IOCs in the environment- Operationalize partner intelligence, MITRE framework adherence, and cloud-to-cloud integrations to ameliorate overall security posture- Work alongside partner organizations in purple team exercises and tabletopsMonitoring and Content:- Drive down manual activity in incident triage and optimize standard processing to force-multiply responder capabilities through SIEM expansion- Maintain health and performance of Splunk Cloud & ES SIEM environment(s)- Standardize and maintain active security content development and lifecycle reviews to assure monitoring efficacy- Ramp-up content quantity and scope to meet expanding business attack surface- Write custom Splunk integrations (apps) to expand API data inputs for vended solutions or custom data/log feeds- Administer asset/identity framework and datamodeling (including data inputs/feeds via Splunk Cloud IDM and/or on-prem HF)Systems Analysis & Engineering- Develop and maintain Linux system deployment and hardening standards- Maintain and optimize Linux platform resources and capabilities- Provide analysis and feedback of security capabilities regarding firewall (NG), WAF, NAC, and endpoint security solutions- Plan & Implement policy/rule enhancement to SIEM and endpoint security technologies in accordance with organizational change control procedure- Deploy and configure systems for security operations usage as appropriate

Northbrook, Il, Us

Content creation and management for the security operations center, including project work to further enterprise security initiatives:-Development of new security monitoring content within both Splunk Enterprise Security & "Vanilla" Splunk Enterprise. Extensively using Splunk's datamodeling and external input capabilities for threat intel./domain enrichment.-Management of content life cycle and tuning to ensure a proactive, ongoing, and metrics-driven approach to reducing false positive detections and ensuring the fidelity of alerting for incident handlers.-Development of reporting and monitoring of critical compliance/governance data for enterprise risk management and vulnerability management consumption. Particular focus on SOX/PCI controls and adherence of data inputs.-Ensuring open communication and collaboration between security teams to best utilize SIEM resources across the enterprise.-Evaluation and validation of data sources/inputs with regard to critical platforms, applications, and services; including but not limited to: -Red Hat Enterprise Linux 6/7 -Avaya Voice Equipment -SAP -IBM mainframe (z/OS) -Palo Alto Firewalls -Qualys vulnerability scanners -Proofpoint email taps -Infoblox DNS/DHCP-Assisting in functionality and configuration for security monitoring of ancillary Splunk elements such as DB Connect, Enterprise Security, and Heavy Forwarder preprocessing of cloud and on-prem. data.-Performing knowledge inventory and process control/evaluation of team activities and work intake, as well as assisting in the onboarding and training of new resources.

Northbrook, Il, Us

Network Operations Center (NOC) Voice Team: Maintaining, troubleshooting, and expanding the monitoring capabilities of an Avaya-centric converged voice environment. Primary support was for our customer contact centers and corporate users.Platforms and applications administered include:-SIP/ISDN infrastructure on Oracle Acme Packet SBCs and Avaya Communications Manager (6.3)-VOIP/SIP applications; -Avaya Call Management System 16 & 18 -Avaya Application Enablement Services 6.3 -Avaya Interaction Center 7.3 -Avaya Experience Portal 6.3 -Avaya media gateways (g430 & g450) -Avaya Aura Messaging 6.3 -Avaya 4620, 9608, 9620 handsets -Avaya One-X Agent/Communicator -Verint Quality Monitoring 11 -Compunetix Audio Conferencing -Cisco ICM Reporting R9 -Nuance Speech Recognition -Esna Officelinx Voicemail platform -Avaya SAL gateways v2.0 -Avaya System.Session Manager 7.0 -Avaya Callback Assist 4.3-Server support and administration; -Windows Server 2008 R2/2012 -RHEL versions 5-7 -VMWare/VSphere 5.1Additional responsibilities extended to monitoring enhancement and alerting management through IBM Netcool Omnibus (SNMP), Splunk, IR Prognosis, and Cyara (automated IVR testing) for the Network Operations Center.I also assisted in process control and enhancement; most formal operating procedure was housed and managed via Service Now.

Dekalb, Il, Us

Part-time gig repairing damaged PC's. Unlike previous titles I've held, this was my first experience working with primarily external customers. Jobs were handled through a managed ticket system, and my focus (apart from prompt, thorough ticket resolution) was on generating value for the business by best serving our customers' needs in shop and on site.

Northbrook, Il, Us

Voice engineering internship; I was introduced to a number of voip systems that administered everything from call recording and conferencing to infrastructure management through a PBX. While on production support, I assisted in the resolution of incidents and problems through a centrally managed queue, and became more familiar with IT management processes in a large corporate setting.

Summer job (2011, 2012, 2013) during which I was responsible for oversight and maintenance of various projects related to technology implementation and end-user support. Here I gained a fundamental understanding of OS X and Windows Server environments, while also utilizing skills in network administration of Cisco and HP equipment. I also developed a limited understanding of Ubuntu, Cloudtrax, and other open source technologies.

Computer/Network Maintenance: Worked extensively with Windows XP and Windows 7 operating systems; also utilizing Windows Server 2003/2008. Ran Cat 5e, Cat6, and Fiber cable. Serviced both wired and wireless networks. Most time was spent performing basic computer repairs and preventative maintenance.

Bachelor Of Science In Operations And Information Management, Om&Is

Computer Maintenance Technology

High School Diploma