John Tan Email & Phone Number

Dumaguete, Central Visayas, Ph

Denmark

- Monitor real-time alerts and assist with incident triage, assessing threat severity, and recommending remediation steps.- Investigate security events from IPS, IDS, firewalls, and WAF, guiding the process from detection to containment, while providing actionable insights.- Manage SIEM platforms like Rapid7 InsightIDR/XDR, SentinelOne, and Azure Sentinel and utilize SOAR tool (TheHive Project) for automated incident response.- Providing detailed security reports identifying vulnerabilities (CVEs) on applications, servers, and network devices to enable customers to prioritize and implement effective remediation strategies, ensuring adherence to industry-best security practices- Collaborate with teams and external stakeholders to respond effectively to incidents and support recovery efforts,- Hands on experience on MS Defender, Vipre email security, App Any Run and OSINT tools- Utilizing MITRE ATT&CK and MITRE D3FEND Enterprise Tactics to streamline case handling and import processes, enhancing threat intelligence analysis and incident response efficiency

- Administering assignments within SCCM/MECM and SCOM for streamlined management.- Conducting thorough assessments of client servers to identify and rectify instances of security patch non-compliance.- Strategized and executed well-organized schedules for patch planning on servers.- Provide insightful reporting on the latest necessary deployments for servers and devices ensuring timely mitigation of vulnerabilities on SCCM and Microsoft Intune- Perform critical procedures when patching crucial servers as communicating with customers and 3rd party vendors- Experience with troubleshooting servers - Win 2012, 2016, 2019, 2022, and Linux- Assigning required SCCM/MECM management points on GPOs making sure all servers and agents running- Generate report from Tenable vulnerability management on servers and network devices to mitigate critical vulnerabilities- Hands on experience with VMware vsphere, HyperV, MS Azure, SCOM, SCVMM, and Citrix PVS, Citrix Xen Desktop