Jonathan Brecheen Email & Phone Number

Remote, Us

Philadelphia, Pa, Us

* Investigated and mitigated threats from phishing attacks, breaches, and other security incidents using a variety of tools, including CrowdStrike, Splunk, Proofpoint, Cisco Umbrella, and Netskope.* Architect for CrowdStrike integrations with ServiceNow to automate detection and incident ticketing.* Optimized custom CrowdStrike and Splunk alerting for rapid response to anomalous activity.* Lead Azure cloud security initiatives, improving Microsoft Secure Score from 23% to 55%.* Lead successful CrowdStrike deployment restructuring for automated updates and QA testing.* Lead successful CrowdStrike query conversion project from SPL (Splunk) to CQL (LogScale).* Lead documentation effort of security system designs and processes, and security best practices.* Lead Qualys Agent deployment to all Windows servers, improving infrastructure security visibility.* Located more than $1m in missing corporate assets using Flashpoint and CrowdStrike querying.* Performed routine threat hunting in CrowdStrike and Splunk to find evidence of undetected threats.* Created tailored threat intelligence to improve defenses against attacks targeting legal firms.* Analyzed incidents, detections, and alerts using CrowdStrike and Splunk logs, and communicated with system owners to confirm legitimate versus malicious activity.* Mitigated malicious activity via CrowdStrike using “Real Time Response” to connect to hosts and remove malicious items, as well as “Network Containment” to prevent further damage.* Mitigated phishing attacks headers, attachment, and link analysis via Proofpoint, CrowdStrike, Cisco Umbrella, Netskope, Silo, VirusTotal, URLscan, and other tools.* Investigated system issues where CrowdStrike was a possible root cause, working with vendors and system owners to identify solutions, including new releases, where needed.* Delivered operational and administrative expertise for CrowdStrike, Qualys, and Splunk as SME.

Hanover, Md, Us

* Continuously monitored and improved security posture for Federal security agency, ensuring Windows and Linux systems were fully protected by CrowdStrike and McAfee Client Proxy (MCP).* Performed successful migration for 50,000 endpoints from McAfee ePO to CrowdStrike.* Delivered operational and administrative expertise for McAfee and CrowdStrike platforms.* Lead root cause analysis and resolution individual and widespread issues preventing successful functionality and communication of CrowdStrike and McAfee software.* Coordinated testing and deployment of new CrowdStrike and McAfee software releases.* Investigated system issues where CrowdStrike and/or McAfee were possibly root causes.

Global, Gb

* Investigated and mitigated past, active, and potential threats from phishing attacks, data breaches, and other security incidents using a variety of tools, including CrowdStrike EDR, Mimecast email protection, McAfee EPO, and ForcePoint proxy.* Improved security posture by leading routine security audits of Active Directory user groups and accounts using least privilege, removing unnecessary access for current employees and verifying deletion of accounts for terminated employees.* Improved security posture by leading enterprise host visibility and patching of known software vulnerabilities identified by Qualys Vulnerability Management.* Analyzed activity triggering CrowdStrike incidents using CrowdStrike host logs and communication with system owners to confirm legitimate versus malicious activity.* Mitigated malicious activity via CrowdStrike using “Real Time Response” to connect to hosts and remove malicious items, as well as “Network Containment” to prevent further damage.* Mitigated phishing attacks by analysis of suspicious mail and its associated headers, attachments, and links via Mimecast, CrowdStrike, ForcePoint, Sandboxie, VirusTotal, URLscan, and other tools.* Prevented company impersonation attempts via monitoring of new domain registrations using OpsSec Security and taking action against domains which could negatively-impact company brands.* Optimized McAfee EPO to resolve widespread FRP encryption issues, as well as enabling more efficient, stable, and secure operation.* Optimized ForcePoint to resolve widespread proxying issues, as well as enabling more efficient, stable, and secure operation.* Delivered operational expertise for McAfee, Qualys, and CrowdStrike as SME for those platforms.

Global, Gb

* Performed as Primary escalation for threats effecting Norton Rose Fulbright’s (NRF) US region, as well as secondary escalation for threats effecting other NRF regions.* Investigated and mitigated active threats to NRF from phishing, social engineering, and other types of attacks.* Reviewed suspicious mail in Mimecast system to determine patterns and provide protections against potential email-initiated attacks.* Utilized data from Crowdstrike, urlscan.io, Sandboxie, VirusTotal, and others to analyze risk of suspicious mail.* Assessed email origin and threat based on header analysis along with research of associated organizations.* Mitigated threats to NRF systems and data from mail deemed malicious using a combination of ForcePoint and Mimecast content blocks, as well as verify active threats are contained via analysis of Crowdstrike reporting.* Successfully optimized US and Canada region McAfee system for more efficient and stable operation, as well as easier manageability.* Successfully optimized US region’s ForcePoint system and associated V5000 appliances for more efficient and stable operation.* Managed ePO infrastructure for US and Canada and delivered technical support for ePO-managed systems, including File and Removable Media Protection (FRP) and Data Loss Protection (DLP) issues and requests.* Managed ForcePoint infrastructure for US and resolve proxy-related issues and requests to unblock content.* Lead routine security audits of US Active Directory user groups containing elevated access.* Monitored new domain registrations and take action against domains negatively-impacting NRF brand.* Leveraged Qualys reporting to verify NRF systems are compliant on required security software.

Global, Gb

* Delivered deskside and remote hardware and software support for employees, attorneys, and partners.* Successfully migrated Outlook and mobile devices as part of Exchange 2016 migration.* Successfully implemented and supported fully remote workforce as a result of COVID-19.* Safeguarded and audited floor security, including granting / revoking access and delivering reports.* Configured and delivered technical support for AirWatch-managed iOS and Android mobile devices.* Delivered technical support for audio and video conferencing, including Crestron, Polycom, and others.* Configured and delivered technical support and administration for Avaya IP phones and Avaya phone system.* Delivered technical support for enterprise network printers, including management of local print servers.* Resolved network hardware and software issues including local and VPN connectivity.* Authored and published knowledge base articles as member of Knowledge Champions Administration Team.* Constructed and optimized SCCM advertisements and collections, based on needs of Austin employees.* Imaged and configured new and replacement systems using SCCM, based on employee requirements.Environment: Windows (10), Windows Server (2008 R2, 2016), Office (2013), Active Directory, Exchange, BitLocker, iOS, SCCM, AirWatch, Android, IP Phones (Avaya), Avaya (Site Administrator, one-X Communicator), DIGIPASS, Audio & Video Conferencing (Crestron, Polycom, Skype for Business, WebEx), F5, ForcePoint, McAfee, DNA Fusion, ServiceNow, Jabra

Austin, Tx, Us

* Delivered deskside and remote hardware, software, network, and VPN connectivity support for employees.* Successfully implemented Okta and Office 365 cloud systems as part of CDR’s business continuity initiative.* Delivered technical support via both Active Directory and iManager for printer, file share, and account access issues in hybrid Active Directory / Novell environment.* Configured and delivered technical support for Meraki-managed enterprise iOS mobile devices.* Resolved escalations of CDR-specific system hardware and software issues forwarded from Help Desk team.* Diagnosed and performed repairs for Dell desktop, laptop, and tablet hardware.* Configured and delivered technical support for enterprise Microsoft Surface HUB hardware.* Delivered technical support for enterprise network printers.* Imaged and configured new and replacement systems using ZENworks, based on employee requirements.Environment: Windows (7, 10), Office Suite (2013, 2016), Office 365, Okta, Active Directory, Novell, ZENworks, BitLocker, Meraki, OneDrive for Business, LANDesk, iOS

Falls Church, Virginia, Us

* Delivered deskside and remote system hardware and software support for employees.* Resolved escalations of system hardware and software issues forwarded from Help Desk team.* Delivered solutions for software security exceptions as member of Carbon Black (Bit9) Admin Team.* Diagnosed and performed repairs for Dell and HP desktop, server, and laptop hardware.* Installed, configured, and delivered technical support for Polycom (Skype-integrated) and Avaya IP phones.* Delivered technical support for enterprise network printers.* Built, configured, and maintained Dell PowerEdge R420/R430 Hyper-V servers and hosted VMs.* Ensured reliable server backups were performed, validated, and tested for data recovery scenarios.* Successfully implemented network and hardware infrastructure upgrade as part of site expansion.* Successfully restructured IT document archive, improving documentation quantity and organization.* Delivered technical support via ActiveRoles Server and Windows Server Manager for file share issues.* Performed maintenance of network wiring, including port patching, cable tracing, and wall outlet repair.* Imaged and configured new and replacement systems using SCCM, based on employee requirements.Environment: Windows Server (2008 R2, 2012 R2), Hyper-V, VEEAM, Buffalo NAS, Windows (7, 10), Office Suite (2013, 2016), ActiveRoles Server, Active Directory, Exchange, SCCM, BitLocker, IP Phones (Polycom, Avaya), Bit9, RSA, SCSM

Baton Rouge, Louisiana, Us

* Provided deskside and remote system administration and IT consulting for ITinspired clients.* Utilized LabTech and GFI monitoring platforms for proactive resolution of desktop and server issues.* Analyzed existing IT infrastructure, recommending enhancements to boost client productivity and capability.* Sourced, built, and configured new and replacement hardware and software based on client requirements.* Resolved network hardware and software issues including local and VPN connectivity.* Installed, configured, and delivered technical support for Cisco and Allworx IP phones systems, utilizing Cisco Unified Communications Manager Express for resolution of call routing issues on Cisco phone systems. * Engineered and maintained local domains for clients using Windows Server, including installation and maintenance of Active Directory OUs and GPOs.* Installed, configured, and delivered support for enterprises using Office 365 and Google Apps Suite email and cloud storage capabilities.* Configured and delivered technical support for Meraki-managed enterprise iOS and Android mobile devices.* Delivered technical support for local and network printers.Environment: Windows (XP, 7, 10), Windows Server (2003, 2003 R2, 2008, 2008 R2, 2012, 2012 R2), Office Suite (2013, 2016), Active Directory, Group Policy, Google Apps, IP Phones (Cisco, Allworx), Office 365, Google Apps, Dropbox for Business, OneDrive for Business, Synology NAS, LabTech, GFI, Autotask, UniFi, Terminal Server, Meraki, iOS, Android

Norwalk, Connecticut, Us

* Delivered deskside and remote hardware, software, Citrix, and VPN connectivity support for employees.* Imaged and configured new and replacement systems using SCCM, based on employee requirements.* Performed maintenance of network wiring, including port patching, cable tracing, and wall outlet repair.* Installed, configured, and delivered technical support for Cisco IP desk phones and softphones.* Delivered technical support via Active Directory and Exchange for email, as well as folder permission issues.* Configured and delivered technical support for MobileIron-managed enterprise iOS and Android devices.* Delivered technical support for enterprise network printers.Environment: Windows 7, Windows Server 2008 R2, Office Suite (2010), Citrix, Active Directory, Exchange, SCCM, BitLocker, MobileIron, ActiveSync, Cisco IP Phones, iOS, Android

New York, Ny, Us

* Delivered deskside and remote hardware, software, network, and VPN connectivity support for employees.* Imaged and configured new and replacement systems using SCCM, based on employee requirements.* Delivered support for Active Directory, Exchange, Novell, and Domino for email and file permission issues.* Configured and delivered technical support for MobileIron-managed enterprise iOS and Android devices.* Delivered technical support for both Cisco IP phones and Interaction Client softphones.Environment: Windows (XP, 7), Windows Server 2008, Exchange, Lotus Notes, Lotus Domino, Novell, Office Suite (2003, 2007, 2010, 2013), Active Directory, SCCM, PGP Desktop, VMWare Service Manager, Cisco IP Phones, Interaction Client, ActiveSync, MobileIron, iOS, Android

Murray, Utah, Us

* Delivered deskside and remote hardware, software, network, and VPN connectivity support for employees.* Imaged and configured new and replacement systems using SCCM, based on employee requirements.* Installed, setup, and configured, as well as delivered technical support for Cisco IP phones.Environment: Windows 7, Windows Server 2008, Office 2010, Active Directory, SCCM, DataArmor, ServiceDesk, Cisco IP Phones

Midland, Texas, Us

* Delivered deskside and remote hardware, software, network, and VPN connectivity support for employees.* Successfully implemented new desktop hardware as part of ExxonMobil acquisition of XTO Energy.* Installed and configured system hardware and software based on customer requirements.* Collaborated with Information Security Team in analyzing potential threats and attack vectors.* Designed schematics for XTO’s existing SCADA network and assisted in design of new secured network.Environment: Windows (XP, 7) Windows Server (2003, 2008), Office Suite (XP, 2003, 2007, 2010), Lotus Notes, Symantec, BitLocker, SQL Server 2008 R2, Active Directory, Footprints, JIRA

Boston, Ma, Us

* Delivered remote software support of proprietary brokerage applications for Fidelity clients.* Authored and published knowledge base articles as administrator of knowledge management system.Environment: Windows (XP, Vista, 7), Windows Server (2003, 2008), SQL Server (2005, 2008), Cyclone, Siebel, ServiceWare, Service Center