Enrique O. Email & Phone Number

Hawthorne, Ca, Us

Hawthorne, Ca, Us

Santa Monica, California, United States

Security engineer with several responsibilities across different cyber security domains. Elevated the security for on-prem infrastructure and across different cloud platforms. Performed Security assessments and implemented security controls following Cyber Security frameworks and best practices for Cloud Storage, Cloud Compute, Endpoint Protection and Email Conducted thorough security assessments and penetration testing with tools like Kali Linux, Nuclei, Tenable.io, and Nmap for all… Show more Security engineer with several responsibilities across different cyber security domains. Elevated the security for on-prem infrastructure and across different cloud platforms. Performed Security assessments and implemented security controls following Cyber Security frameworks and best practices for Cloud Storage, Cloud Compute, Endpoint Protection and Email Conducted thorough security assessments and penetration testing with tools like Kali Linux, Nuclei, Tenable.io, and Nmap for all systems and new company acquisitions. Develop and maintain risk management policies and procedures for Vendor Risk Management. Develop and maintain vendor assessment workflow via OneTrust. Review vendor risk assessments, provide guidance on data security and application security according to companies policies and standards. Knowledgeable in different Cyber Security Frameworks and compliance.Part of a team developing and implementing internal Security Operations Center(SOC). Manage and maintain log ingestion of critical applications. Utilized the MITRE ATT&CK framework to create and automate threat hunting queries and searches. Leveraged several threat intel feeds for Indications of Compromise(IOC) and Indicators of Attack(IOA) detections. Create, maintain Automations and playbooks for SIEM environment. Utilized EDR, SIEM logs, PowerShell scripts to collect event logs for Incident response investigations.Deployed ,managed, monitored and maintained Data Loss Prevention across different Cloud Storage solutions, workstations and Email.Device hardening and posture management for all corporate devices utilizing the following Frameworks CIS, NIST and HITRUST. Documentation of security controls. Utilized several security tools such as JAMF, Azure Intune compliance and Configuration policies, and EDR Polices to achieve Zero Trust Access. Create Endpoint Security policies for Attack surface reduction, Account Protection, Conditional access, AV, Firewall, Disk Encryption. Show less

United States

Ensured overall security of On-Prem and AWS Cloud systems for two sites, identified, and addressed potential gaps in the infrastructure, and implemented policy changes to ensure compliance. Installed and configured CISCO ASA Firewalls 5545 and 5515 in two sites. Managed overall security of AWS using native tools such as Cloud Trail, Cloud Watch, IAM and Prisma Cloud. Reviewed and implemented policy changes on CrowdStrike EDR and Tenable Nessus. Configured and implemented security policies on… Show more Ensured overall security of On-Prem and AWS Cloud systems for two sites, identified, and addressed potential gaps in the infrastructure, and implemented policy changes to ensure compliance. Installed and configured CISCO ASA Firewalls 5545 and 5515 in two sites. Managed overall security of AWS using native tools such as Cloud Trail, Cloud Watch, IAM and Prisma Cloud. Reviewed and implemented policy changes on CrowdStrike EDR and Tenable Nessus. Configured and implemented security policies on Netskope CASB, Proofpoint, and Google Workspace. Implemented stricter CrowdStrike EDR and Firewall policy changes for users and VPN.●Successfully implemented AWS Systems Manager to automate patch and inventory management. Managed and customized cloud security using Prisma Cloud and AWS Inspector for vulnerability assessment. Managed, monitored and maintained all AWS compute resources. ●Established comprehensive cloud security policies using Corp Security tools. Tools in scope Netskope CASB, Proofpoint and Google Workspace in compliance with regulatory requirements.●Enhanced corporate Endpoint protection for all systems by auditing all systems and deploying CrowdStrike EDR. Created custom IOA and IOC policies for all endpoints and block unsupported applications from being installed. ●Configured patch management policies according to best practices using Tenable Nessus. Deployed Agent and authenticated scans. ●Created custom alerts on Splunk SEIM and mapped alerts to the MITRE ATT&CK Framework. Automated Alerts for threat detections queries for SOC, improving overall security. Show less

●Developed and implemented comprehensive user awareness training program that significantly reduced phishing attacks via Microsoft Office 365 Attack Simulation and 1:1 user training. Implemented security policies, process and procedures for all systems, leading to a stronger security posture. ●Enabled MFA across all critical systems, implemented least Privileged accounts across Active Directory, Endpoints and Cloud Platforms. Implemented policy for endpoint patch management via Windows… Show more ●Developed and implemented comprehensive user awareness training program that significantly reduced phishing attacks via Microsoft Office 365 Attack Simulation and 1:1 user training. Implemented security policies, process and procedures for all systems, leading to a stronger security posture. ●Enabled MFA across all critical systems, implemented least Privileged accounts across Active Directory, Endpoints and Cloud Platforms. Implemented policy for endpoint patch management via Windows SCCM and Nessus. ●Enhanced corporate Endpoint protection for all systems by implementing application deny and allow list. Implemented and managed CrowdStrike EDR. Created custom IOA and IOC policies. ●Efficiently delivered incident response expertise, implemented policies and procedures to enable effective investigation of incidents and events. Collected logs and generated assessment reports. Leveraged Splunk SIEM for threat Hunting, alerts, and correlation detection. Developed and implemented sandboxing environment for incidents using Flare VM, Falcon Sandbox and Kali Linux●Implemented Fail2Ban to improve Firewall security policies for systems exposed to the outside, resulting in better protection against malicious traffic. Implemented GEO fencing on all Firewall rules and VPN Access. Set threshold on IPS, IDS, AV, SSL and ICMP security policies. Implemented SSL inspection. on all use endpoints. Deployed, maintained, and configured Fortinet Web Application Firewalls across critical applications.●Implemented security policies for DLP and leveraged Office 365 Email DLP, ATP, Azure Information Protection and Netwrix for Data Classification.●Pen testing and vulnerability assessment and remediation using Kali Linux, Burp Suite Pro, ZAP, Nessus, Bloodhound, OpenVAS. ●Managed, monitored and maintained Azure compute resources. Implemented Azure AD best practices using native tools such us Microsoft Cloud app Defender, Privileged Identity Management, Azure Firewall and WAF. Show less

Implement, manage and monitor all core infrastructure systems in two Data Centers across Campus. Day to day administration of Office 365 and Azure, Barracuda Security Gateway, Barracuda Archive & backup. Sophos Enterprise AV, 2012 WSUS, VMware 6.0 -6.5. Fortinet Firewall, SIEM using Splunk, Windows 2016 Active Directory, Citrix XenApp. Install, Configure and manage 120 HP Aruba Wi-Fi AP’s, Aruba ClearPass and Mobility Controller, as well as management of HP Aruba 50 Switches… Show more Implement, manage and monitor all core infrastructure systems in two Data Centers across Campus. Day to day administration of Office 365 and Azure, Barracuda Security Gateway, Barracuda Archive & backup. Sophos Enterprise AV, 2012 WSUS, VMware 6.0 -6.5. Fortinet Firewall, SIEM using Splunk, Windows 2016 Active Directory, Citrix XenApp. Install, Configure and manage 120 HP Aruba Wi-Fi AP’s, Aruba ClearPass and Mobility Controller, as well as management of HP Aruba 50 Switches. •Implemented Security Profiles on our Firewall by auditing current Firewall rules. This included running external scans using ZenMap to view open ports, tightened down on exposure to critical systems by disabling unused ports, disabled unused rules. Added Security Profiles to all firewall rules this included AV, Web Filter, Application Control, DoS, Application Control and IPS. Implemented Web Application Firewall to all Web servers, minimizing exposure to SQL injections, Cross Site Scripting. Installed and configured Splunk SIEM. Migrated Windows 2016 external DNS to Cloud solution Dyn, Migrated Windows 2008 AD to 2016.•Migrated On-Premise Barracuda Appliance to Barracuda Cloud ESS. Migrated 700 user accounts from On-Premise Exchange to Office 365 and enabled MFA. Implemented Mail Flow Rules, Malware, Connection, and Spam Filters. Security and Compliance that includes DLP Policies. •Implemented security policies using RapidFire assessment tool, MBSA, Splunk and FortiAnalyzer. •Migrated from old DELL Servers/Storage to new Hardware. Migrate VMWare Cluster 6.0 – to 6.5.•Implemented WSUS patching for all campus Desktops and servers. Deployed Azure Application Proxy and Azure AD connect. •Implemented SSL VPN Firewall Policies for Remote users, Faculty and Contractors. Show less

Gardena , California

Managed 2008 Active Directory environment, including server maintenance, monitoring, troubleshooting, and technical user support. Executed proof-of-concept (POC) for Office 365 SSO utilizing Imprivata and deployed ESET AV on local and remote clients to ensure a compliant environment. Developed and enforced security policies to maintain system integrity.Oakwood Worldwide, Los Angeles, CA 2008 – 2016Sr. Systems AdministratorDemonstrated leadership in system administration by… Show more Managed 2008 Active Directory environment, including server maintenance, monitoring, troubleshooting, and technical user support. Executed proof-of-concept (POC) for Office 365 SSO utilizing Imprivata and deployed ESET AV on local and remote clients to ensure a compliant environment. Developed and enforced security policies to maintain system integrity.Oakwood Worldwide, Los Angeles, CA 2008 – 2016Sr. Systems AdministratorDemonstrated leadership in system administration by successfully developing and deploying system solutions, conducting thorough system testing and troubleshooting, and efficiently managing escalation and maintenance processes. Provided outstanding support during system migrations and ensured seamless operations by effectively resolving any issues. Demonstrated a comprehensive understanding and expertise in managing large-scale systems, ensuring optimal performance and high uptime. ●Successfully led the migration of Active Directory from 2008 to 2012 and managed the transition of Windows Clusters from 2003 and 2008 to Windows Server 2012.●Expertly managed systems across multiple data centers, overseeing over 250 physical servers and 400 virtual environments across 3 data centers. Show less

West L.A.

Fulfilled a critical role leading systems administration information technology support for $100MM premier provider of corporate housing and serviced apartment solutions, with a focus on overseeing systems throughout multiple data centers, leveraging expertise in migrations, scheduled maintenance, and multiple operating system and hardware configurations. Responsible for over 250 physical servers and 400 virtual environments across three data centers serving a global user base. •Served… Show more Fulfilled a critical role leading systems administration information technology support for $100MM premier provider of corporate housing and serviced apartment solutions, with a focus on overseeing systems throughout multiple data centers, leveraging expertise in migrations, scheduled maintenance, and multiple operating system and hardware configurations. Responsible for over 250 physical servers and 400 virtual environments across three data centers serving a global user base. •Served as the primary point of contact for all vendor engagement and two Data Centers. Managed and maintained systems that included Physical Blade HP servers, Windows Clusters, VMware and Hyper-V Clusters, Virtual Machines. Migrated Server/Cluster farms to new Hardware as well as performed storage migrations.•Managed day to day maintenance such as provisioning physical and virtual systems, patching, monitoring, troubleshooting, software and firmware updates using various deployment methods such as HP OneView, HP Systems Insight Manager, Manage Engine Application Monitoring, 5 Nine Manger, vSphere 5.0-6.0.• Introduced & implemented the following Enterprise solutions, HP SIM Imaging, Enterprise Patching Ecora, and Lumension. Manage Engine Monitoring for all Core Infrastructure Systems.•Maintains accountability for the availability and operation of Enterprise HP Storage Arrays, including all firmware updates, provisioning storage, troubleshooting and performance monitoring; migrated data to new arrays using Peer Motion and Remote Copy. Additionally, managed the Brocade switch infrastructure systems configuration for all storage arrays.•Implemented a six Node 2012 Windows Datacenter Hyper-V Cluster with Replica Broker to Site in Phoenix Datacenter. Set up HP 3PAR Site – Site Asynchronous Replication with Remote Copy between 2 Datacenters•P2V servers to Hyper-V or VMware Environment, cutting down cost on physical servers and power consumption. Show less

Network Administration, Computer Networking And Windows Infrastructure

Graduated with Honors and Perfect attendance. Received Computer Networking and Microsoft Windows Infrastructure Certifications. Acquired.

Cisco Networking Academy

Windows Server 2008/2012 Active Directory Services

Certificate Of Completion, Incident Response And Malware Analysis