Greg Yeh Email & Phone Number

San Francisco, California, Us

SE covering Federal Healthcare

San Francisco, California, Us

Splunk Inc. (NASDAQ: SPLK) was founded to pursue a disruptive new vision: make machine data accessible, usable and valuable to everyone. Machine data is one of the fastest growing and most valuable parts of big data -- generated by every component of IT infrastructures, applications, mobile devices, website clickstreams, social data, sensors and more.Splunk is the leading software platform for machine data that enables customers to gain real-time Operational Intelligence. Our company's mission is to address the challenges and opportunities of managing massive streams of machine-generated big data. More than half of the Fortune 100 and thousands of enterprises, universities, government agencies and service providers use Splunk software to harness the power of their machine data for application management, IT operations, security, web intelligence, customer and business analytics and more.Splunk helps customers solve problems in ways they could never dream before. With Splunk, all you need is a browser and your imagination. See less

Dallas, Tx, Us

- Responsible for the planning and build out of the Next Generation Data Center (NGDC).- Managed, maintained and administered the original Splunk instance in the Virtual Data Cetner (VDC).- Rebuilt and upgraded the VDC instance of Splunk to support HSTS for security compliance.- Properly deployed Splunk Stream using the Splunk Stream Independent Forwarder to support 10Gbps network data capture in both the VDC and NGDC.- Applied agency signed SSL Certificates to all web facing Splunk Servers.- Successfully transitioned production Splunk Monitoring activities from the VDC to the NGDC.- Designed and executed a plan to transfer 15TB of historic Splunk data from the VDC Splunk instance to the NGDC running Splunk instance.

Reston, Va, Us

- Designed and implemented Splunk Enterprise Indexer Cluster Expansion process. Expanded indexer cluster from 6 nodes to 13, while maintaining full search availability and zero loss of data for the SOC and CSIRT.- Designed and implemented a plan to retire the ArcSight SIEM solution in favor of Splunk Enterprise with Enterprise Security App. Recreated rules, alerts, reports and workflows; Onboarded all previous ArcSight data streams to Splunk system; Transitioned SOC and CSIRT to use Splunk Enterprise Security.- Deployed and evaluated Splunk User Behavioral Analytics to determine if the application would meet the Client’s needs.- Participated in the full System Development Lifecycle of Splunk Enterprise; Evaluation of the product, approval boards, racking and cabling of servers, IP provisioning, full administration and build of O/S. Manages and administers 26 Splunk Production Nodes, 9 Splunk DEV nodes, and a Single instance of Splunk for Engineering.

Reston, Va, Us

- Deployed an ArcSight 6.0C (CORR) upgrade solution with all new hardware. Full System Development Lifecycle build.- Tested and created content and workflow to support the inhouse SOC / CSIRT. - Upgraded existing ArcSight 4.5 implementation to ArcSight 5.0 on existing hardware with zero loss of data; Provided unprecedented levels of administration and support resulting in the client retiring a third party SOC solution for an in-house SOC / CSIRT.- Onboarded data from a multitude of different sources and devices to the ArcSight System. Gained a higher visibility into the overall state of the enterprise.

Reston, Va, Us

- Performed Internal Controls Review audits utilizing FISMA and NIST 800-53 framework related controls against client regional sites. Audits included Policy and Procedure, System and Security Configuration, Asset Management, Hard Drive Encryption and Sanitization, and Physical and System Security. Delivered findings with a recommended remediation strategy.- Participated in Privacy Walkthroughs to identify and minimize the exposure of PII around the enterprise. Findings and results were delivered in a report with recommended remediation strategies.- Performed Certification and Accreditation on clients in house software and systems following NIST 800-53 framework. Findings and results were delivered in a report with recommended remediation strategies.

Reston, Va, Us

- Conducted vulnerability scanning and analysis across the entire enterprise. Results were translated in to reports summarizing the state of vulnerabilities and progress of patching efforts. - Conducted web application vulnerability testing to validate security of external and internal applications. Findings were compiled into a report along with a recommended remediation strategy for each finding. - Conducted wireless war walks across the enterprise to discover and report on rogue unauthorized access points. Established process improvements that led to increased detection and response rates.