Jonathan A. Email & Phone Number

Canada

Canada

➢ Monitor, triage, investigate and respond to security threats through detailed securityevent analysis, validation, and correlation.➢ Recognize the attacker TTPs in the MITTRE ATT$CK and Cyber Kill Chain phases and create detections based on that understanding.➢ Accurately diagnose impact, damage, and mitigation techniques needed to restorebusiness operations and minimize reoccurrence.➢ Perform security and threat response investigations in complex cases involving loganalysis and forensics.➢ Develop monitoring use cases and support in building effective threat detection andresponse programs.➢ Review cyber intelligence and threat data from internal and external sources and support in developing new capabilities to analyze and respond to security events and incidents.➢ Develop tools, techniques, and operational processes to continuously monitor on-prem and cloud environments.➢ Actively participate in daily triage of SIEM events.➢ Design and develop automation (SOAR) to ensure SOC processes are automaticallyescalated to respective teams.➢ Tuning systems to reduce false positive rates to improve information value➢ Develop incident response strategies, paying particular attention to industry standard methodologies and advances in technology and cyber security➢ Act as the subject matter expert during security incidents➢ Work closely with other teams to provide mitigation recommendations to reduce the overall security risk within the organization

Canada

Technical Support: Provide technical support for all client external storage having file system issues  Provide installation, configuration guides for clients having RAID solutions running on Windows and Mac  Provided Seagate propriety software for clients and enabled them setup backups to NAS devices Provide step by step guide on installing NAS storage solutions and provided specifications for various platforms

Nigeria

➢ Design, Deployment, Configuration, Upgrade, Management and Optimization of the ArcSight SIEM estate (ESM, ADP, Logger, ArcMC, Connectors) to ensure availability and efficient performance of SIEM tools.➢ Analysis of log events attributes and values to design relevant alerting.➢ Building and testing automation tools for SIEM provisioning.➢ Authoring of SIEM processes and manage the document lifecycle.➢ Drive the continuous improvement of SIEM tooling based on a strategy throughout the organization.➢ Implementing enterprise-wide Security Information Event Monitoring (SIEM) controls using ArcSight ESM and ArcSight Data Platform resources for improving visibility of enterprise threats and risk exposures➢ Deploy and configure smart connectors for the collection of enterprise logs and telemetry from over 350 different enterprise applications and developing file flex connectors for ingestion of custom enterprise application logs➢ Develop proof-of-concept use cases to monitor and report on malicious and anomalous user activities in Databases, Servers and Firewalls, Active Directories, IDS/IPS, File Integrity Monitoring, Scanners, and other custom applications➢ Led weekly meetings and reporting to senior management, review incident tickets, events of interest (EOI), indicators of compromise (IOC), playbook and workflow reviews and set the stage for the new weeks threat hunting approach.

Nigeria

➢ Experience with deploying, installing and administering ArcSight ESM in a complex environment➢ Skilled with Flex Connectors, and content development, some scripting experience➢ Assist in the proper operation and performance of ArcSight ESM, Loggers and connector➢ Provide capability to analyze ArcSight output and interpret reports➢ Integration of data feeds (logs) into ArcSight Log monitoring➢ Perform Content Development to properly identify data feeding ArcSight➢ Develop filters to assist in the identification of significant events➢ Coordinate with client engineering staff for modifications, downtimes, and upgrades➢ Develop reports (manual and automated) to support the development, collection, and reporting of Quality Assurance and - Performance metrics (as defined by the client)➢ Develop dashboards/reports for external customers for system monitoring➢ Provide ad-hoc training to analysts focusing on specific client missions, including generic ArcSight training sessions - and Custom Use Case training sessions➢ Provide recommendations and implement changes to optimize ArcSight products in the customer environment

Information Systems (Msc), Information Technology

Bachelor'S Degree