Joel Wickham Email & Phone Number

Cincinnati, Ohio, United States

• Lead and manage a 24x7 SOC, ensuring continuous threat monitoring, detection, and response.• Optimize and fine-tune security tools (Web Proxy, CASB, SIEM, ICES, DMARC, virtual deception technology) to reduce false positives and enhance detection accuracy.• Implement and monitor insider threat tools, focusing on high-risk users.• Own and manage the security awareness program, running monthly phishing tests and providing follow-up training.• Technical lead for incident response during cyber investigations.• Develop and maintain SOPs for SOC operations to ensure effective security monitoring.• Provide evidence for audits to demonstrate compliance with regulatory standards.• Mentor junior analysts and foster continuous learning within the team.• Stay current with evolving cyber threats, providing strategic guidance on security controls.• Work with IT teams to deploy and operationalize new security tools, ensuring seamless integration.

Cincinnati, Ohio, United States

• Primary escalation contact for a 24x7 SOC• Maintain and utilize a threat intelligence platform.• Conduct security awareness assessments and training for associates.• Investigate security and operation incidents in and provide timely responses.• Stay up-to-date with the latest cybersecurity threats and trends.• Coordinate with external security vendors and assess security risks for new technologies and projects.

Cincinnati, Ohio, United States

Cincinnati, Ohio, United States

• Respond to security incidents, ranging from small to large, by analyzing and addressing them in a timely manner.• Analyze phishing emails using various tools and techniques, and run monthly internal phishing campaigns to raise awareness and enhance remediation training.• Create and maintain security documentation for processes and procedures, ensuring that they meet regulatory requirements and industry best practices.• Help plan and execute security projects related to Malware Sandbox Analysis, DMARC, Email Gateway, EDR, and TIP, working closely with cross-functional teams to achieve project goals.

Cincinnati, Oh

• Monitor for cyber security events and anomalies using a variety of tools such as BlueCoat, OpenDNS/Umbrella, SEP, CarbonBlack, Exabeam, and QRadar.• Analyze files, URLs, domains, and emails to determine their legitimacy, using internal tools as well as online resources such as VirusTotal, URLVoid, IPVoid, and Robtex.• Create and tune rules and reports in QRadar to improve the detection and response capabilities of the system.• Help plan and execute security projects related to NYDFS, CarbonBlack, Impreva SecureSphere/CounterBreach, Varonis, QRoc, ServiceNow SecOps, and ReliaQuest, collaborating with cross-functional teams to ensure successful project outcomes.• Provide recommendations for security enhancements to management and senior IT staff, based on the results of security assessments, risk analyses, and other sources of information.• Research the latest IT security trends and technologies and share findings with colleagues to promote continuous learning and improvement.

Cincinnati, Oh

• Command and control outages to quickly restore service, providing support and leadership for all high-priority incidents.• Maintain control, ownership, and operational authority of an outage triage during high-pressure situations, leveraging technical skills to work with L2, L3, and L4 resources to develop an incident mitigation and restoration plan, and guiding technical resources to service restoration.• Actively direct and prioritize all aspects of the high priority incident bridge line and chat with urgency, ensuring effective resource management and service restoration.• Ensure timely engagement of essential technical support teams, and provide updates to high-level management, stakeholders, and customers.

Cincinnati, Oh

• Managed 50+ servers and 700+ desktop/laptops for multiple companies, providing IT consulting services that included everything from the server installs to password resets.• Used tools such as ConnectWise, Continuum, and LogMeIn on a daily basis to monitor, manage, and troubleshoot IT infrastructure and services.• Interacted with HP, Dell, Microsoft, and ISP representatives on a daily basis, to ensure timely and effective resolution of IT-related issues.

Cincinnati, Oh

• Ensured the security and operational readiness of multiple computer labs across campus, which contained a total of 400+ computers.• Troubleshot a variety of hardware and software issues, as well as student and faculty account problems, using tools such as Norton Ghost, Track-It, and others.• Imaged all lab computers using Norton Ghost between every semester, ensuring that they were up to date and secure.