QRadar SME

Worked as a contract employee for Ford Motor Company thru STGEngineer solutions in QRadar SEIM (uDSM, LSX, etc).Level 3 support for QRadar SIEM related issues.Define SysLog message format from various servers for ingestion into QRadar. Utilize Regex to parse log message data and populate SIEM fields of interest.Create custom scripts (BASH) to automate various processes.Implement new SIEM appliances to support Cyber Security logging initiative. Update and maintain development QRadar instance.

• Implement & manage Intrusion Detection System (OSSEC, Suricata).• Implement & manage network vulnerability scanners (Nessus, OpenVAS, and Nexpose).• Manage Intrusion Prevention Systems (Checkpoint) and firewall (Cisoco ASA5500) rules.• Manage systems (Server 2003 & Linux) in a virtual environment (ESXI 5.1).• Manage & monitor antivirus status of all systems in the network thru centralized mgnt.• Utilized network monitoring tools (Wireshark / TCP dump) to troubleshoot network issues.• Research vulnerabilities and intrusion techniques to ensure current infrastructure is secure.• Create & monitor vulnerability mitigation matrix to ensure continuous improvement.• Utilize WhatsUp Gold to monitor network environment via SNMP

• Design, implement, and manage corporate servers and workstations• Design, implement, and manage corporate networks and services (terminal servers, Active Directory, Group Policy)• Manage daily backups and archives• Manage and enforce software licensing for all corporate systems• Manage virus, security, and patch management• Support corporate printers, scanners, and copiers• SAN (Storage Area Network) Administration