Christopher Chalmers Email & Phone Number

Edinburgh, Scotland, Gb

Edinburgh, United Kingdom, Gb

Edinburgh, United Kingdom, Gb

Responsible for the day-to-day operation of the MDR service. Ensuring that the service performs as effectively and efficiently as possible and to the standard expected by Adarma. Works in collaboration with the SOC Manager with regards to tactical and strategic decision making for the MDR service.• Ensure that false positives alerts are kept to an acceptable minimum. (Reduction of unnecessary False Positives) in collaboration with the SOC engineering lead • Monitor and verify that Security Investigations are carried out to the required standard across all teams• Monitor and verify that Threat Hunts are carried out to the required standard across all teams• Ensure that Threat Intelligence is distributed amongst the MDR team in a timely fashion• Frequently review the performance of people, process, and technology within the MDR Service with a view to improving the quality and efficiency of the service.• Develop and implement key processes for the MDR service with associated KPIs• Provide reporting on the performance of the service• Monitor and evaluate staff progress, set team goals, and assist with training and recruitment.• Define coaching needs and provide training in collaboration with the relevant TDMs• Clearly communicate team goals, making sure that they are achieved• Tackle any issues and conflicts with team members • Provide reporting on the performance of staff and teams (QA, Staff knowledge, experience, targets)• Technical lead for the MDR Service, acting as the main point of contact within the SOC for MDR service technology• Monitor and ensure that the technical components of the MDR service are maintained, supported, and operated by the MDR teams as effectively and efficiently as possible.• Deliver the MDR service in accordance with client SLAs and internal KPIs.• Help to ensure overall client satisfaction with the service.• Collaborate with the SOC Engineering lead to ensure that the running of the MDR service

Edinburgh, United Kingdom, Gb

Complete end-to-end IT security solutions, including security monitoring, solution implementation, architecture and process development in line with industry best practice.ECS recently established their own in house multi-tenant Security Operations Centre (SOC). I have worked in this department since it was established. My responsibilities include –• In house Splunk SME, providing custom apps mapped to the CIM, data on boarding (Syslog, Universal Forwarders), dashboarding and search optimization.• Troubleshooting complex on site and cloud infrastructure related Splunk issues.• Mentored junior member of staff, providing guidance on Security and Splunk related issues• Leading the on boarding of new clients into the service, including Service Catalogue sign-off, use case deployment, process creation and refinement• Attending customer sites to deliver workshops and presentations regarding the ECS Service.• Stakeholder management across several clients, involving MI reporting and communication of ongoing incidents that had service impact.• Attending recruitment days and hosting telephone interviews to recruit new staff for the SOCAt the time of the position, the company was known as ECS Security.

Edinburgh, United Kingdom, Gb

Current Project: Supporting a clustered deployment of Splunk running Enterprise Security as a SIEM tool for one of the largest Building Societies in Britain. • Administration of new and legacy SIEM solutions• Health monitoring of the SIEM tools• On-boarding of new data sources, agent deployment and configuration• Supporting SOC with technical knowledge, alert creation and search optimization• Providing on-call supportAt the time of the position, the company was known as ECS Security.

Edinburgh, United Kingdom, Gb

Providing 24/7 reactive security monitoring for one of Britain’s largest high street banks. Working as a technical resource I provide-• Initial triage on security tickets for Malware detection, Data Loss Prevention (DLP), Phishing and various client / server side attacks.• Conducting further investigation of ‘In Progress’ tickets.• SOX Compliance monitoring via QRadar and Jira.• Investigating HIPs/NIPS tickets passed to the SOC via third party services.• Escalating and providing support to Computer Security Incident Response Team (CSIRT)• Troubleshooting log source failures with client SME’s.• Monitoring Security logs from Windows, UNIX, RACF, iSeries and VMS• Change Management approval based on log source impact.• Offering training and advice to Analysts where necessary.At the time of the position, the company was known as ECS Security.

Edinburgh, United Kingdom, Gb

ECS Security delivers security audit and consultancy to the banking and financial service sectors.We currently drive the architecture, security design, implementation, assurance and incident recovery at several of the UK's High Street Banks' most vital services, such as payments, insurance, core banking and card operations.We're proud to be providing our clients with the best in security audit and confidential consultation services - and to be making real companies more profitable every day.Vacta was taken over by ECS Global in October 2012 to become their specialist security arm.At the time of the position, the company was known as ECS Security.

Edinburgh, United Kingdom, Gb

Acquired by ECS in October 2012. At the time of the position, the company was known as Vacta.

Bsc Computer Systems & Networking, Computer Systems Networking And Telecommunications

Hnd Computing, Technical Support

Education record