- Collaborate with Security Operations Tier 1 & Intern Supervisor to develop plans for training Tier 1 and Intern Analysts.- Debrief new Security Operations Analyst Tier 2s on client information and train them with client services.- Hold weekly meetings with Security Operations Analyst Tier 2s to delegate tasks and check progress of development operations. - Perform internal penetration tests to assess vulnerabilities and weakness in SIEM software, alert infrastructure, and capabilities of the internal Security Operations Analysts.- Conduct technical interviews for new hires and rehires.- Assess performance of Security Operations Analyst Tier 1s to determine readiness for promotion to Tier 2.

- Trained a team of Security Operations Analysts to utilize Elastic SIEM software to monitor client networks.- Held weekly meetings to check on team progress, delegate tasks, answer questions, and find solutions as a team for vulnerabilities and upkeep of nodes.

- Monitored external client networks using log analysis for threat hunting in addition to reactive services in order to secure a remote corporate environment as a managed service provider.- Configured and implemented solutions involving the Elastic Stack and other open source tools to produce security alerting solutions to be implemented on client networks.- Completed development operations to improve coverage of logs and alerts on client networks.

- Investigated Windows Event Log and Sysmon logs concerning network activity to determine what is harmless and what can be harmful on an internal network.- Audited alerting software configurations to whitelist proven benign activity and to increase verbosity and coverage on potentially malicious activity.- Created live-updating visualizations of log data including graphs, charts, and heat maps to use while monitoring a network.

- Led weekly meetings with Security Operations Interns and Tier 1’s to check their progress on tasks, delegate projects to the team, and discuss solutions to issues.- Overlooked team projects to ensure success of the team.- Trained Security Operations Interns and Tier 1’s using a class and demonstration format on using and configuring Elastic SIEM software.

- Researched and created Elastic SIEM software to build a personal Elastic Stack.- Utilized Elastic SIEM software to monitor activity on an internal network.- Investigated suspicious network activity and provided formal technical reports on any findings.- Troubleshooted and configured Elastic Stack to ensure software was functional and up-to-date.

- Compiled research on the types of malware and how to prevent them or recover from them.- Created pamphlets and powerpoints to educate small businesses on how to maintain their online security.- Wrote a formal report on cybersecurity recommendations for small businesses. - Researched recent cyber attacks that occurred against small businesses in Vermont and how they could have been prevented.

- Utilized Google Admin to assign over 2,000 Chromebooks to designated faculty and assigned them to different organizational units.- Provided help desk support for faculty for mobile devices, laptops, computers, and streaming devices such as Chromecasts or Apple TVs.

- Maintained current software licenses and patched applications to stay up to date with the latest features.- Provided reports for wireless connection speeds across a 23-building campus. - Provided detailed documentation on the configuration of hardware and software alongside any troubleshooting steps taken for help desk tickets.