James Krepps Email and Phone Number

• Provisioned and configured SIEM technologies including: Google Chronicle, Splunk, and Sumo Logic.• Reviewed and integrated log sources to improve logging level and parsing to support detection enrichment.• Wrote technical documentation to enable streamlined department workflows.

• Create and optimize detection content to alert on known patterns of malicious behavior. • Provide training and guidance to peers on best practices when deploying and optimizing existing content.• Work with customer security teams to develop strategies and to plan for future content development and deployment to better meet industry standards.

• Leverage GreyMatter Detect platform to develop and deploy detection content to variety of SIEM and EDR technologies.

• Develop and deploy logic to SIEM technologies including: Splunk, LogRhythm, QRadar, and Azure Sentinel to provide persistent coverage and network security across network environments.• Coordinate with customer security teams to optimize and plan alerts to best fit industry standards and requirements.

• Evaluate and report on cloud information security infrastructure while supporting University of South Florida and enforcing best practices.• Identify, evaluate, and report on cloud security risks and vulnerabilities, and recommend remediation's based on industry best practices.• Support and participate in information security projects and initiatives fostering better relationships at both the state and federal levels.• Contribute to the assessment of information security risks affecting general populace by way dissemination of Threat Reports publicized by Cyber Florida.• Support and evaluate instances hosted via AWS.

• This position monitors and coordinates the activities of and provides support and assistance to assigned laboratories to enable effective and safe lab operations.• Primarily responsible for maintaining Windows Servers assigned to Computer Science division. This is comprised of maintaining optimal health and security standpoint of hosts.• Creation and deployment of images to meet individual course needs.

• Primarily consists of building, deploying, and maintaining Cisco and Microsoft based networks.• Constructed and maintained different types of network architectures to include the use of Cisco devices and services.• Configured and monitored Servers running Microsoft Server 2008 R2 & 2012 R2 as well as affiliated applications to service end user requests.• Ran local help desk service. Responsible for providing assistance to end user clients and applications.