Cristin Prevallet Email & Phone Number

Washington, Dc, Us

Washington, Dc, Us

Provo, Ut And Seattle, Wa, Us

Provo, Ut And Seattle, Wa, Us

Provo, Ut And Seattle, Wa, Us

Wv, Us

• Leads SOC (security operations center) analysis, monitoring health and integrity of critical infrastructure, as well as responding to security events for global corporate environment.• Leads SIEM (security information and event management) enhancement by evaluating cybersecurity threat trends from IT-ISAC (information technology information sharing and analysis center) and reduces false positives.• Contributed to the security program enhancement, leading to $100M sales in 2020 and a $1.125B acquisition in 2021.• Manages vulnerability management (internal and external) for the company, including our HQ and four cloud environments. Oversaw an increase of our PCI scope from 108 systems to ~ 3,000 systems.• Leads a team of two security engineers to triage daily alarms/incidents for 3000+ SaaS-based systems in four cloud service provider environments.• Transitioned Clarabridge’s third-party SOC to an in-house SOC. Evaluated SIEM collection tools, worked with vendors, worked with multiple engineering teams to ensure logs were being sent to the SIEM tool, developed in-house processes, alerting matrix, developed on-call schedule.• Administered central antivirus management solution for global SaaS systems. Evaluated alerts, troubleshoot update errors, worked with multiple engineering teams to ensure AV was installed on all images and running systems, managed scanning policies and exclusions.• Lead and coordinated third-party and customer external penetration testing to increase security throughout the corporate environment biannually. Worked with multiple stakeholders to ensure all compliance (PCI) requirements were met on time and that all findings were remediated to closure. • Has become a security champion for the company, directly influencing multiple teams within the organization to include security in their processes, procedures, and operations.

• Performed technical and documentation assessments during a Security Authorization Process (SAP) to help systems obtain a 3-year ATO (authority to operate).• Designated as the Training Subject Matter Expert for security engineers on the SAP Team and tasked with creating a training program. Trained new team members quarterly on how to assess against NIST 800-53 and DHS 4300A security controls.• Assessed configuration settings for Windows/Linux platforms, database, network, and application security. Recommended security changes to meet compliance requirements.• Performed Plan of Action & Milestones (POA&M) Management for approximately 40 systems and tracked them to closure.

Washington, Dc, Us

Previously, I worked as an intern in the IT department of the VA Medical Center. It was an extremely valuable experience for me. Working there I destroyed hard drives, participated in a wall-to-wall inventory of all IT equipment throughout the hospital campus, imaged and configured computers from Windows XP to Windows 7, and replaced several employees’ Windows XP computers with those Windows 7 computers that I imaged and configured.

Associate Of Science (A.S.), Cyber Security

Education record

Education record

Associate Of Science (A.S.), Information Technology