Cory Crook Email & Phone Number

Tucson, Az, Us

Tucson, Az, Us

Galway, Ie

Developed a Detection-as-Code pipeline process to support cybersecurity inputs from Threat intel, Threat Hunting, Adversarial Simulation, GRC, Vulnerability Management, and Incident Response. A pipeline to streamline cyber readiness and deployment from the inputs to outputs which fortified defensive strength within the organization.• Engineered Detections based on risk scoring / risk assessment and managed the Detection engineering team. • Create Playbooks and SOPs based on detection logic and triage processes leveraging I/O of a SOC.• Regularly executed, Recon, Lateral Movement, Privilege Escalation, Collection, Exfiltration, C2 & reporting.• Designed Security Controls and Monitoring techniques for 89,000 users and 150,000+ assets in 140 Countries. • Lead on several purple teams, and table tops oriented to validate detections/controls• Managed the SIEM engineering by configuring parsers, aggregators, loggers, log sources and collectors.• Implemented SOAR workflows with inputs from the detection pipeline and through micro-automation.

Ca

Administered network with 150+ user accounts and 30 computer systems, providing network and local level support for various applications and databases. Formed a Cyber-attack range to mimic purple teams' exercise. Decreased alert fatigue 108% upon implementing Security Orchestration Automation Response (SOAR). Designed Internet of Things devices to deploy across specific network segments retrieving analytical data based on performance and scanned ingress/egress traffic. Reviewed standard operating procedures and updated in an agile process, which increased productivity by 40% and provided a better understanding of security architecture within the organization. Formulated network security policies, disaster recovery, automated patch management, online backups, enterprise antivirus, and secure remote access solutions. Monitored enhanced flagged SIEM metrics, analyzed logs, and enriched logs to reveal potential IOC's. Documented all change management processes to ITIL standards to achieve quick and efficient troubleshooting of internal assets.

Ca

Here at I work as a blue team defender in the cybersecurity industry. Below is a high level overview of what a SOC Analyst role entails based on NIST cybersecurity framework: 1-Identify- Scan for Vulnerable assets and Identify threats and vulnerabilities to mitigate and escalate before remediation action or incident response is to be activated. 2-Protect- Research and discover defense weaknesses on corporate assets such as, Network devices and endpoint devices within the organizations infrastructure. 3-Detect- Use network monitoring and detection tools to gain visibility into network and machine data within the organization. Enriching this data from its machine form to discover potential indicators of compromise. 4-Respond - If an Indicator of compromise or Proof of concept has been discovered our next step is to respond that incident and triage any potential security breach. 5-Recover- This stage we remediate and recover operations.

Spearheaded security engineering—a top-to-bottom software and hardware installation project. Pioneered creation of detailed policies and procedures including research & recommendations, topology diagrams, Compliance and governance, Disaster Recovery and prevention plans, maintenance checklists, threat/ risk assessment analysis, and agile project management process. Conducted cost analysis for network security hardware and software, allowing for US$47,000 annual savings. Introduced change management solutions to address troubleshooting documentation and tech support escalation procedures within the network, resulting in a 37% weekly Return on investment. Successfully achieved a complex network remodeling and redesign that demonstrated Defense-in-Depth. Handles security alerts using SIEM and IDS/IPS to detect/prevent data loss or breach. Establishes secure network connections using VPN, proxies, VLAN segregation, and active firewall rules.

Montreal, Quebec, Ca

Conduct Cybersecurity Analyst tasks applied to the FIPS, ISO 27001, CIS, and NIST Compliance/frameworks as follows: Identify - Develop an organizational understanding in managing risk, people process, assets, data, policies and processes. Protect - Provide safeguards to ensure delivery of critical infrastructure services. Protect Identity Management & Access Control within the organization, provide Data Security Protection, and manage organizational policies, procedures, and agreements.Detect - Through continues monitoring of SIEM detection rules and provide timely discovery of cybersecurity events. Detect anomalous events along with critical IT asset health check data. Respond - Once detection occurs investigate and analyze logs for indicators of compromise. Isolate, Mitigate, Investigate, and Report on all potential breaches. Recover - After incidents occurs then move toward recovery to normal operations to reduce the impact from a cybersecurity incident. Follow recovery planning processes and procedures to restore systems.

Dutch Harbor, Alaska, Us

Created an asset management system for authentication, authorization, and accounting for specific company resources—encouraged accountability for resources management and saved US$20,000 annually.• Performed troubleshooting procedures on electronic signaling equipment and critical communication systems.Installed signal cables for signal systems and switches. Tested signal systems to meet compliance guidelines.

Overland Park, Kansas, Us

Troubleshoot technical support tickets at a rapid pace excelling the most resolved trouble tickets of the organization in 1 month of training. Naturally adapted to technical skills environments, tech hardware, security operations software.• Completed training on internal systems, local procedures, and other technical subjects for company employees.• Provided Level 2 hardware and software support to 100,000+ end users via phone, email, remotely and onsite.• Ensured optimum hardware and software system performance, responding to growing requirements, responding to software releases, version updates, hotfixes, security-related updates, and log file entries.• Decreased downtime, and increased client satisfaction, by aggressive resolution of support and security issues.

Undergraduate Certificate In Applied Cybersecurity (Acs), Computer And Information Systems Security/Information Assurance

Bachelor Of Applied Science - Bas, Cybersecurity And Information Assurance

Associate Of Arts And Sciences - Aas, Information Technology