Donald Burrows, Iii Email and Phone Number

Senior Splunk Engineer responsible for architecting, designing, and developing Splunk use case solutions for various security challenges.These solutions are implemented for multiple enterprise clients in an Agile Scrum environment. Kaiser Permanente: Developed a novel compliance tool to detect improper access to Electronic Health Records (EHR) by employees. Designed a risk scoring algorithm based on conditions compliance analysts used to determine suspicious access events. The risk score will weed out noise while only showing actionable incidents to the compliance analysts. Dashboards created for analysts to drill into specific incidents to get a more detailed view of the access events in question. Triage workflow developed for analysts to assign and track ongoing investigations. First American: Trained and applied Kernel Density Estimation model (using Splunk Machine Learning Toolkit) to reduce noise of anomalous outbound traffic by user. Each user is fitted to their own probability distribution to determine normal baseline behavior and only alert on large deviations from that baseline. 87% reduction of notables from out of the box ES use case. Fox Broadcast: Developed an interactive network monitoring dashboard to display interface health and active connections of Fox's Broadcast network. Color coded node displays allows for proactive action against erroring interfaces. High level tooltip display of interface information to display interface name, thruput, carrier, link status, and error count. Drilldown on interface pops out detailed view of interface warning/error logs and heatmap of link status over time.

Designed and delivered use cases for MITRE ATT&CK techniques (T1041 and T1052) for Wells Fargo. Used Splunk Machine Learning Toolkit to fit and apply classifier trained on known Domain Generating Algorithms. (Extension of Splunk DGA App to include more features to train on.)

Designed, implemented, and optimized Splunk queries to meet various security use cases. Served as Splunk administrator of Enterprise Security. Assets and Identities queries developed using LDAP add-on to query AD and required information.

Created searches and dashboards to visually present relevant security data, enhancing decision making. Data onboarding with custom parsing configurations to Splunk best practices. Developed use cases and security notables. Designed and developed security dashboards used by security analysts. Splunk administrator and developed weekly security reports for the CISO.

My responsibilities include tutoring K-12 students in all forms of mathematics with a focus on methods of teaching students in any area they may be struggling with.

Interned to a team of financial advisors that work with institutional and private client investors. I specifically developed spreadsheets to track various publicly traded investments securities. I prepared reports for client meetings with the financial advisors and assisted in marketing initiatives.