John Rosales Email & Phone Number

United States

United States

• SIEM Tickets: Learned about and documented the existing SIEM processes to create use cases to help the team standardize the SIEM ticket handling. Personally resolved over 350 tickets and trained two new SIEM analysts. • Proofpoint Alert Generation: Blocked known malicious IOCs (IPs/URLs/Domains) and reviewed/investigated known compromised user accounts to determine the indicators of compromise (IOCs) and patterns to alert for suspicious activity. • Incident Response (IR) Documentation: Generated Incident Flash reports, Post Incident reports, use cases, and tool utilization documents to inform stakeholders of incidents and help improve the IR team efficiency. • Role Based Access Control (RBAC) Tagging: Managed a project to tag Market Security Incident Managers (MSIMs) and enabled systematic alerts when an account level change takes place to promptly review accounts with changes.• Automation: Utilized Power Automate to upload weekly reports to the team’s SharePoint repository and sent weekly reminders to the team without human intervention.

Oakbrook Terrace, Il, Us

• Security Contact verification: Collaborated with the Security Operations portion of GTRM to verify the international contact cards and ensure the Market Security Incident Managers (MSIMs) were up to date.• Managed Service Documents: Partnered with GTRM Service Managers to review and revise 200+ Admin Binder security documents.

Denver, Co, Us

• SSL Certificate Compliance: Evaluated known McDonald’s sites to determine SSL certificate compliance and partnered with Global IT contacts to remediate noncompliant sites.• Managed Monthly Security Operations Report: Streamlined/automated the Security Operations Report which reduced the time it took to compile the monthly reporting.• Refreshed Incident Response Playbooks: Helped define pertinent action steps by interviewing the GTRM stakeholders and updating the procedures, timelines, roles/responsibilities to be followed in the event of a Cyber Security Incident. • Managed GTRM Admin Binder: Properly organized existing documents and worked with document owners to ensure new documents were filed correctly for use by the Service Owners.

Denver, Co, Us

• Coordinated Security Operations Monthly Report: Engaged all members of the GTRM team to aggregate performance metrics into a single monthly report for GTRM leadership.• Service Now (Service Café) Site Management: Performed site cleanup and re-mapped the reporting links that were compiled for GTRM management’s use.• Trained Colleague: Provided background details and coached the new GTRM team members on the existing GTRM processes.

Denver, Co, Us

• Document Refresh: Assisted Kathy Moore with an Excel based document project to update and standardize templates.

Denver, Co, Us

• Configured the Restaurant File Maintenance (RFM) Interface: Managed restaurant facing technology (RFM/RFM2). • USORT Web Page Management: Updated and customized the SharePoint Web Pages for the USORT team.

Bachelor Of Science - Bs, Information Technology

Associate’S Degree, Science