Christopher Scogin Email & Phone Number

Texas, United States

New York, New York, Us

New York, New York, Us

Reviewing and assessing IOC's that are monitored on the network. Using SIEM technology to review individual entries to determine threat escalation needs.SIEM Alert inspection monitoring with HP ArcSight ESMSecurity Incident case management with internal case software appliance to create hierarchical case overview created security incidentInteraction with multiple security driven tools used in investigative actions in order to resolve security incidents. Tools included:CrowdstrikeSplunkTaniumVMray AnalysisVirusTotal APIProofpoint TAP servicesCLI tools both custom and native to the OSSOC Representative for Cloud Incident Response teamProvide deliverable playbooks that map out investigation processes for correlated alerts in SIEMProvide training knowledge, insights, and materials for soc team members as the SME in cloud infrastructure and securityTrain new soc analysts to perform daily duties during onboarding of new team membersBuilding unique custom tools using a variety of programming languages that interface with multiple tools listed above to create additional Investigation platform to perform investigative rolesPerforming security incident response investigations for both on-premise and cloud-infrastructure alertsInterfacing with outside consultants during training events to escalate skills and role performanceSecurity Incident policy review team memberMaintaining and creating documentation for SOC team members to keep up-to-date material relevant to current environmentsData Loss Prevention alert monitoring and follow up escalationCyber Intelligence case investigations from internal intel gathered from gathered teams around the enterpriseBuilding Splunk queries using SPL language to view alerted events in an organized visual data setSplunk query automation to provide efficiency in job functions

My current and evolved role has migrated from a mid level position to a Senior Role for cloud infrastructure management and Security engineering. Job duties consist of the following but are not limited to:Google Cloud Platform management for all clientsIn-House software development with Google API to manage, monitor, and deploy serversDevelopment of Hotbackup process using Google API and Python/GolangRisk Assurance and Analysis for internal and external purposesVulnerability AssessmentsPolicy and Procedure management using a combination of ISO 27001 and NIST standardsDisaster Recovery trainingInternal training sessions with Support to better understand the underlying infrastructureIncident Prevention/Response to Cloud Server attacks

Experience: OpenVPN network management, CA certificate upkeep, mapping out IP schemas for over 100 serversEngineering and architect design with Google PlatformConsolidate all physical and virtual servers into a single Xen Server clusterBridging multiple VPNs together using OpenVPNConfiguration management and systems administration using FabricConduct case studies for new Sys. Admin and DevOps tools for increasing productivityCreating GUI for system administrative tasks using web applicationsManage company G Suite account setting up user and group policiesDirectory-as-a-Service AdministrationSkillsNetworking: Routing and switching with multi-vendor equipment(Cisco, Sonicwall, Fortigate/Fortinet, RouterOS)IPSec configuration with vendors listed above as well as open source software with StrongswanOpenVPN Server/Client networkingDNS/DHCP configuration and managementGNS3 testing environmentSecurity:HIDS (ossec server/agent setup)Firewall management with router ACL's, IPtables, Uncomplicated Firewall (ufw), FireholNetwork monitoringNetwork auditsServer audits looking for irregularities Group Policies for user hardeningLanguages:Bash scriptingPython 2.7 and 3Flask sites for server applicationsServer installations and provisioning using FabricCreate scripts for system administrative tasksHTML/CSSOperating Systems:LinuxServers: Ubuntu, Debian, CentOS, Red HatWorkstations: Manjaro, Ubuntu, LinuxMint, FedoraWindowsServers: 2003, 2008 R2, 2012, 2012 R2, 2016 (preview only)Workstations: XP, Vista, 7, 8.1, 10Cloud Computing:Google Cloud PlatformManaging multiple projectsManage Google Cloud StorageIPSec VPN to private networksRouting between Local LAN and Google LAN environments via OpenVPNIntegrating Google IPSec networking with internal BGP dynamic routing for clientsCreate/Delete/Maintain virtual machines via Cloud ComputeCreate individual networks and firewalls to isolate each client network

-- Weekly monitoring of Windows backups, Cobian software backups for our Virtual Hosting Servers, and processing updates to those backups if necessary.-- Responsible for the upkeep of individual desktop software patches, updates, new installation of various software needed for developers to perform their related functions. -- Supplying up to date information on all VPN GUI clients that our employees connected to client locations were continually up and running, if connections went down, contacting remote client locations to talk to IT to make sure if changes on there side have been updated, and notified to all employees on our side.-- Installations of Windows server 2012 Host machines across our client base to set up our software on by installing Hyper-V on the machine to host a separate Windows server 2008 R2 (non-AD integrated) to run the companies web based software.Server migrations of Windows server 2003 (non-AD integrated) to a Virtual server running Windows server 2008 R2.-- Setting up the foundation website on each server through IIS manager to place the folder structure of the web based software to run on.-- Keeping up to date with new virtual hosting technologies to integrate into the preexisting infrastructure. Familiarizing myself with Vmware's newest software versions of Vmware player 7.0.0 as well as Vmware Workstation 11.-- On a monthly basis I would boot up six virtual machines hosted on three desktops to run our companies update process to the clients. This included checking all software patches and updates, copying the main VM to copy five times to make a total of six virtual PCs, changing the pc name on each of them, assigning individual IP addresses (static), pointing them to the correct subnet and name servers, then testing connections to make sure they are all functional.

Master Of Science - Ms, Cybersecurity/Information Assurance

Bachelor'S Degree, It Systems-Security

Associate'S Degree, Network And System Administration/Administrator