Corey Hill Email & Phone Number

St. Louis, Mo, Us

Responsible for the strategic and operational aspects of Threat Response, CTI, Threat Detection, and Threat Emulation functions.

St. Louis, Mo, Us

Provide strategic oversight, direction, and planning for the threat monitoring and incident response organization. Coordinate with other architects to improve process, procedure, and technical capability for threat monitoring and response. Operates as an expert in Incident Response with expertise in both the technical and procedural aspects.Serve as escalation point for analyst and response teams in support of security initiatives and investigations.

Manages teams responsible for Detection Engineering, Threat Intelligence, Threat Monitoring, SOAR Automation, and Incident Response (both CSIRT) services at CitrixManages an organization that is dispersed across 4 countriesCreate, maintain, and improve security incident response process and proceduresBuilt team to address requirements for multiple certifications including FedRamp, IRAP, and SOC2 compliance.Increased efficiency in which security events are ingested and addressed which has doubled the capacity of the SOCMentor direct reports and colleagues on IR processes and forensicsWork with cross functional teams to address security gaps and provide consultation on security initiatives

Fort Lauderdale, Fl, Us

Manages teams responsible for Detection Engineering, Intelligence, Threat Monitoring, Incident Response (both CSIRT and PSIRT) services at CitrixManages an organization that is dispersed across 4 countriesCreate, maintain, and improve security incident response process and proceduresBuilt team to address requirements for multiple certifications including FedRamp, IRAP, and SOC2 compliance.Increased efficiency in which security events are ingested and addressed which has doubled the capacity of the SOCMentor direct reports and colleagues on IR processes and forensicsWork with cross functional teams to address security gaps and provide consultation on security initiatives

Fort Lauderdale, Fl, Us

Manage a geographically diverse team of analysts across 4 countries Create, maintain, and improve security incident response process and procedures Built team to address requirements for multiple certifications including FedRamp, IRAP, and SOC2 compliance. Increased efficiency in which security events are ingested and addressed which has doubled the capacity of the SOC Mentor direct reports and colleagues on IR processes and forensics Work with cross functional teams to address security gaps and provide consultation on security initiatives

Mountain View, California, Us

• Trusted advisor for the customer in all matters concerning service delivery and ongoing projects • Lead client and engagement teams in delivery of our Managed Defense solutions, exchange threat intelligence with clients and internal teams, and briefing existing clients, potential clients, and external groups on security threats and incident response • Lead security incident response and leverage product knowledge to guide customers • Articulate complex information on security threats and incident response to internal and external groups across varied levels of technical understanding • Lead efforts in expanding and improving the development of processes, methodologies, and client communication methods for advanced persistent threat detection, threat intelligence, incident response, and vulnerability analysis • Effectively communicate investigative findings and strategy to client stakeholders, technical staff, executive leadership, and legal counsel. • Responsible for building relationships with internal business units to identify innovative solutions to enhance service delivery.

Raleigh, North Carolina, Us

Act as Incident Commander for IR Team.Provide Intel support for security operations, vulnerability management and incident response teams.Consult management by producing and assisting with the development of cybersecurity process and procedures including: Playbooks Incident Response Plan Standard Operating Procedures Project and toolset documentationServe as a Tier 3 escalation point to SOC analysts.Collect and analyze data to show operational affectiveness and consult on areas of improvement.

Charlotte, Nc, Us

Act as interim SOC Manager in the absence of the managerTriage resumes and conduct interviews for potential anaylst and provide hiring recommendations to upper managementServe as escalation point for tier 1 and 2 Cyber Threat anaylstServe as incident coordinator for medium, high, and critical severity incidentsBuild and conduct trainings for members of the SOCAssist SOC manager in overseeing tactical and operational facets of the SOCInterface with other groups within the company when addressing security concernsDevelop policy and procedure around Incident Response and day to day operations of the SOCDevelop and provide threat metric overviews for managementPerform threat hunt missions

Charlotte, Nc, Us

Assist in escalated computer security incidents and cyber investigations including computer forensics, network forensics, root cause analysis and malware analysis.Act as coordinator in the event of escalated cyber threats/incidents for Tier 1 analysts.Execute on appropriate mitigation strategies for identified threats.Participate in threat hunting activities to proactively search for threats in the enterprise environment.Participate in the creation and maintenance of use cases for recurring investigation/incident triggers in support of the 24/7 Cyber Threat Operations and Cyber Threat Management program.Participate in the creation and maintenance of playbooks used in response for investigation/incident triggers in support of 24/7 Cyber Threat Operations and Cyber Threat Management program.Interface with other teams in Information Security (e\.g\. network operations, Cyber Threat Operations Center \(CTOC), vulnerability management) along with information and liability risk officers and technology management to help guide cyber security strategy.Adhere to all policies and standards, as well as regulatory requirements regarding reporting and escalations.Work with team members to enhance and enrich security monitoring tools with contextual information.Provide mentoring for junior level analysts.Deliver cyber intelligence services and material to information technology and business leaders.Identify new threat tactics, techniques and procedures used by cyber threat actors.Publish actionable threat intelligence for business and technology management.

San Jose, Ca, Us

The Security Analyst focuses on incident and network analysis. Job responsibilities include detecting, analyzing, and resolving potential security events detected in customer environments. This position will also revolve around providing feedback into the Threat Defense platform and processes in order to increase the detection fidelity and accuracy of the Threat Defense solution; and working with security incident investigators to do deeper analysis of detected events.

Updated computer forensics labTaught about virtual machines and set the computer forensics lab up with themRepaired computer hardwareUsed Encase 6 & 7Learned about undercover softwareIntroduced the Linux based Ubuntu operating system

Master'S Degree, Information Security And Forensics

Bachelor Of Science (B.S.), Information Technology Securities; Information In Technology Management