Daniel Burghardt - Retired Email & Phone Number

Stamford, Ct, Us

Hired by Spectrum Enterprise to drive down critical and high vulnerabilities and bring the enterprise into compliance for a 40,000 node networkUtilize Kenna VM to ingest Qualys scan data which integrates real-world threat/exploit intelligence for better visualization of threats.Partner with internal teams to provide technology support in larger work engagementsDrive the security event incident response lifecycle through Jira by leading all security countermeasures.Improve the existing security operations through analysis and revision of the system logic to better detect security threats leveraging nessus, nmap, Cisco IOS Software Checker...Advise engineers on best practices to identify workarounds and create exceptions when dealing with EOL/EOS/Non Standard equipment.

San Jose, Ca, Us

I worked in a 24/7 air gapped SOC protecting Controlled Unclassified Information (CUI) as it relates to sensitive DOD projects which adhere to the DISA/IL5/Risk Management Framework. Utilize tools (FireEye, Stealthwatch, Splunk Enterprise Security, Tenable.sc, ATT&CK, McAfee Endpoint Security…) to identify notable events that are triggered by alerts that are configured from the data ingested and normalized by spunk from the hosts in the enterprise. Leverage Tenable vulnerability scans to identify and prioritize patching based on risk & CVSS score. Scan results are disseminated to system owners who mitigate vulnerabilities leveraging Jira to track progress.Provide input to SOP and IR plans where necessary which would allow stakeholders to work with greater efficiency. Mitre ATT&CK framework is a recent tool being utilized along with OSINT to understand behavioral tactics and techniques allowing us to pivot toward mitigation with greater precision and speed.

San Jose, Ca, Us

Utilize investigative tools - Kibana, bro/zeek, Threatgrid, AMP, Talos Intelligence, Umbrella, Alien Vault, Sandbox, VirusTotal, Mitre Att&ck and pcap logs for deep dive investigationsReview OSINT resources to identify indicators of compromise to conduct network hunts for malicious activity or potential infectionsPivot through the various IOC's while analyzing data to understand the TTP's used while referencing the framework of attacksDecrypt obfuscated payloads to identify details of commands

Durham, North Carolina, Us

Review vulnerability scan results to assist stakeholders remediate risk as it relates to Bitsight security ratingReview and assist with CIRT (Cyber Incident Response Team) planning Manage IT Ops implementation and resolution of failed SOX audit findingsConsolidate and streamline Infrastructure reporting and alerting through centralized distribution lists and SIEMUtilize Samanage (Solarwinds) to identify and collect IT Asset details, trouble ticket trending and create firewall change templatesTriage Cisco Iron port email filters to eliminate inbound malware and attachmentsLeverage collected Symantec endpoint protection data to identify riskCollaborate with business units and IT teams to develop and implement procedures and processes

Foster City, Ca, Us

Investigate and mitigate claims of FP/FN as they pertain to Qualys Software detectionsTrain junior staff in investigative techniques and tools Leveraged Splunk dashboards for visualization to vulnerable hosts in enterprise along with reporting panels. Dedup query results for ease of reading.Work with customer teams and internal engineers to resolve High Severity incidentsPrivate Cloud Support (PCP) – Dedicated Large Account Support Engineer Customers needing stricter controls have come to invest in Qualys' PCP (private cloud platform) also get a dedicated group of support specialists that have been hand picked from the masses to fast track the success of their day to day operationsTechnical Support Engineer III Responsible for supporting international fortune 500 customer base who utilize the suite of cloud based security solutions which are involved in the Vulnerability Management, PCI, Policy Compliance, Web Application Scanning, API, Malware in a heterogenous environment.Recognized consistently as a top producing tier II/III resolution specialists among 27 Support Engineers based on call and ticket resolution.As an approved PCI - ASV (approved scanning vendor) Responsibilities included the review of FP and approval of submitted attestation reports based on PCI DSS standards

Basking Ridge, Nj, Us

A Member of the Security Operations Team Responsibilities included maintaining the end to end communications for many International fortune 500 companies. This included but not limited to the management, configuration and troubleshooting of Firewalls, load balancer, proxy's, ssl vpns, routers and desktops in a multi vendor environment. Performed Move, Add, Change and Delete (MACD) on firewall policy's; Checkpoint, Cisco and Juniper security policies in a multi vendor device environment. Log review and analysis of traffic, anomalies and IDS/IPS healthUtilized Wireshark, grep, snoop, pcap and command line access to review log data from the firewalls, load balancers and proxy's to produce root cause analysis of outages when necessary

Provided expertise in supporting and managing the day to day operations at the headquarters for this Fortune 500 international trading organization. Worked to drive down communications costs by 50% leveraging IP telephony. Negotiated contracts for our multi vendor environment.