Eric Bauer Email & Phone Number

San Jose, California, Us

Cincinnati, Ohio, Us

Cincinnati, Ohio, Us

Service Owner: Cloud Security Lead Cloud Engineer Identify, test, and integrate new native cloud security products, features, or services Manage Access to all cloud service providers Maintain and Monitor Security Operation Assets in AWS Work with Architects to improve the cloud infrastructure Establish Security Operations policies and lifecycles for all cloud service providers Establish and enforce baseline policies across all cloud service providers Identify and remediate Vulnerabilities and misconfigured security configurationsService Owner: Log Management Manage the global logging policies Create baseline policy for Default Application, Database, and Cloud Services Logging Create log retention policies Identify new log sources Ingest new log sources Verify all log sources for confidentiality, integrity, and availability Maintain log sources• Maintain active log source list• Identify attributes for each log (EPS, number of sources, ports used, contact person, etc…) Maintain and Control all architecture for Logging and all security applications that handle logs. Organize Log Management to prevent duplicated effort between all applications that handle logs Ensure correlation between Endpoints, Syslog Relays, and the SIEM Identify new tools to be added for enhancement of the Logging solution Identify where logs need to go (SIEM, Storage, other tools) Identify the 'usefulness' of the log

• Managing 3 internal IT resources and 1 IT consultant resources to maintain web presence, databases, and other IT infrastructure.• Managing over 30 people across 6 different teams in high-energy situations.• Organizing and overseeing volunteers to handle a variety of roles for each event• Managing inventory of online store, including the launch of a new line of apparel and hardware.• Bookkeeping and recordkeeping of contracts, event arrangements, location rentals and royalty payments as well as advertising and event promotion for over 12 events yearly.• Developing and executing online acquisition generation marketing activities such as search engine marketing, email campaigns, online advertising, and newsletters.• Creating re-enactments storylines and scripts for individuals and groups before, at and after each event.• Maintaining equipment to ensure high standards of safety.• Continually striving to enhance events through identification of problem areas and implementation of improvements.

Menlo Park, California, Us

Contracted to Proctor and Gamble• Work directly with the Incident Response team• Provide logistics and metrics for ticket consumption• Evaluate new vendor software to be placed inside P&G• Provide knowledgeable feedback for architecture changing projects• Collaborate with the Protiviti Team and internal resources to provide guidance for improving the overall organization's security posture• Participate in workshops to align vendor offerings and processes to P&G standards• Design and recommend integrated security system solutions to increase security for data at multiple classification levels• Direct and collaborate with vendors to meet aggressive project goals and deadlines• Review existing use cases to analyze gaps, and propose new use cases to be implemented into ArcSight and other SIEM solutions

Montreal, Quebec, Ca

Support of Security Tools such as Trend Micro Deep Security Suite, Nessus, Qualys, McAfee, Sourcefire, and Arcsight. Additional responsibilities include the evaluation, testing, documentation and integration of new Vulnerability Management & Compliance Audit Solutions. Key Deliverables and Responsibilities (include but are not limited to the following) • Configuration and deployment of the defined security solution components (security technology)• Write and perform validation tests. • Contribute to the development and tracking of IT Security deployment projects plans. • Monitor and control the performance and status of security devices, including routine testing, analysis and other operational tasks.• Experience building & managing Security tools such as ArcSight, Trend Micro, Splunk, Imperva, Nessus, use cases & content, driven from customer requirements• Deploy the security technology solution to fit client requirements by adapting from reference architectures, including technical diagrams and bills of materials for implementation.• Assist in the analysis and resolution of security incidents and in providing containment recommendations using software and hardware tools and following established procedures and corporate policies. • Participate in security audits and audit remedations. • Develop and maintain standard operating procedures, processes and guidelines for IT security operations, support and maintenance. • Maintain awareness of trends in security regulatory, technology, and operational requirements. • Mentor other IT Security Analysts and perform knowledge transfer to other teams as required.Team Lead Manage a team of five Security Engineers. Drive security enforcement company wide. Manage Ticket queue and assignment Design and implement security solutions for US government customers

Louisville, Kentucky, Us

Support of products such as Data Leakage Prevention (DLP) suites, IBM Weblogic Datapower , nCircle, McAfee, Secure Web Gateways and SSL PKI. Additional responsibilities include the evaluation, testing, documentation and integration of new Vulnerability Management & Compliance Audit Solutions. Support, selection, and implementation of: - Endpoint protection technologies. - Technologies used for access to secured network environments or remote support - Technologies enabling 2-factor security - Security audit and compliance technologies - Data Classification and tagging technologies - Network Access Control technologiesKey Roles includes: •Installation, testing and implement systems software including: customization, documentation resolution and support: - Understand and implement the software certification process as it pertains to security solutions - Develop and implement rollout plans for new applications as well as version upgrades to existing applications.•Provide technical consulting, and customer support to all areas of Information Systems and business users: - Provide technical assistance and support to IT and business users as it pertains to security solutions - Work as consultants to internal departments, Enterprise Information Security and Service Centers for security solutions. - Set policy and strategic direction as it pertains to security solutions and infrastructure.•Provide support for business security projects and initiatives as required: - Develop and implement procedures that support the management, daily operations and technical support of the security infrastructure environment. - Provide system integration and implementation expertise in relation to departmental and enterprise applications.•Other duties: - Performs on-call support and direction for less experienced associates. - Provides training and leadership for less experienced associates. - Understands and leads in standardized methodologies.

Cincinnati, Ohio, Us

• Auditing Checkpoint and Cisco firewalls via Tufin• Reviewed Firewall Changes for approval• Monitored, Implemented, and Analyzed vulnerability scans through Qualys• Project Work: Rolled out McAfee HIPS into the environment - Designed, Tested, and implemented the HIPS rollout project.• Completely redesigned and implemented Qualys architecture. - Headed the complete project from start to finish. - Reduced Scan times from two weeks to a single night. - Reorganized Scanners within geographical locations to improve scan times - Reorganized network connections and firewall rules to scanners help improve functionality - Increased the number of Scanners within the environment - Manually configured the Scanners before implementation - Redesigned Scans and Reports to provide the optimal data - Pushed for Authenticated scans throughout the entire environment

Cincinnati, Ohio, Us

• Experience on both Microsoft & Linux operating systems• Analyze / Investigate / Identify / Remediate Incidents.• Create Tickets to Remediate.• Help Maintain 24/7 On Call Coverage.• Monitor, Manage, and Maintain Tools (Tipping Point IPs, Snort IDS, Symantec SSIM and AV, Splunk, Qualys, ISS, Trendmicro DCS, Bluecoat, RSA, and Sophos AV).• Implement and maintain 130 Tipping Point Intrusion Prevention devices ensuring in-depth security throughout the General Electric Global Infrastructure• Monitor Snort IDS network traffic for malicious traffic• Monitor Arbor Netwflow for malicious traffic.• Assisted RSA SME in discovery of a vulnerabilities• Grepped through Blue Coat proxy logs identifying malicious activity, resulting in the removal of over 300 hundred rogue assets.• Identified and remediated over a thousand infected conficker machines resulting in preventing numerous accounts being locked out as well as restoring network bandwidth.• Utilized Splunk and Symantec SSIM on a daily bases to analyze, investigate, identify, and remediate malicious code and software• Developed numerous search rules and strings for Splunk and Symantec SSIM• Evaluated Symantec SSIM and Splunk for corporation use• Implemented and maintain Symantec, Sophos, and Trendmicro DCS Antivirus programs on a corporate level.• Maintained ISS services through BlackIce Personal Firewall to manage and analyze network traffic.• Manage and run Qualys scans for vulnerabilities in the environment and then work with local teams to correct these vulnerabilities.• New Tool and Software evaluations• Malware and Virus Remediation on corporate scale.• Quality Assurance Manager for Incident Response Team• Monitor / Manage L2 Ticketing Queue.• Audit Remediation Progress of Ticket Queue• Monitor and delegate change and security approvals.

Erlanger, Ky, Us

Major Duties • Provide technical assistance to computer system users• Install new systems• Perform special projects (ex. moves of PCs, software builds for certain departments)• Research/resolve problems using technical reference or testing • Installation of software• Images – Deployment and Development• Desktop repair and support• Fixing HP Laserjets• Fixing general windows and software errors• Working with Novell • Working with WSUS• Symantec System Console and Firewall• Application Deployment• Scripting• Repackaging• Patch Management• Working with SAVIN copiers• Virtualization of Applications Project work• Securely ghosted 50 hard drives to new hard drives and replaced the drives• Organized with all levels of Comair to schedule pickup and drop off of computers• Organize a upgrade of shop PCs and working with the vendor and management to meet all requirements for the business.

• Help Desk Situations to Network Administration to Hardware installations• Contracted out to numerous job sites• Dealing with Spyware and Virus• Ghosting laptop hard-drives• Installing software• Desktop repair and support• Using Windows Server 2003—Adding users, assigning permissions• Using Symantec Antivirus server 9.0 and 10.0 server edition and keeping clients up-to-date• Used Lotus Notes for email, tech support on setting users up and troubleshooting.• Installing client software• Maintaining a HIPPA requirements for IT environment• Maintaining installed client software• Desktop repair and support• Dealing with Spyware and Virus• Fixing HP Laserjet 1200 and 4050 series printers• Fixing general windows and software errors• Keeping Windows Up-to-date• Setup Cisco Concentrator, and maintaining the Cisco PIX• Maintaining VPN connections with home users as well as 9 different hospitals• Using Microsoft Office to make reports, do data entry, and keep data• Using Windows Server 2000—Adding users, assigning permissions, setting up FTP access, setting up file server• Using basic AIX functions: The main database they use is in Unix on an AIX box.• Using Symantec Antivirus server 9.0 server edition and keep clients up-to-date• Setting up printers over the network• Switching out backup tapes• Maintaining Novell Server (self taught) Adding users, assigning permissions, setting up file server• Ghosting hard-drives• Fixing general windows and software errors• Keeping Windows Up-to-date• Setting up printers over the network• Installing client software• Maintaining installed client software• Desktop repair and support• Dealing with Spyware and Virus• Switching out backup tapes