qomodo's IoT threat prevention agent detects and prevents attacks on all IoT devices, including industrial and enterprise. Our agent monitors for malicious behaviour with no impact to system performance. We will aid businesses with reducing time to market, regulatory compliance and innovation focus.

* Investigated and reported on security events via SIEM, IDS/IPS and Full Packet Capture appliances.* Created, tuned and tested IDS rule sets prior to global deployment.* Created and updated Standard Operating Procedures (SOPs) and Security Policies.* Reviewed incident tickets reported from the first line security event analysts.* Retrieval of full packet capture data for forensic intrusion analysis.* Created whitelist feeds to aid threat hunting, as well as threat intelligence IOC SIEM dashboards.* Conducted interviews for both security event analysts and senior event analysts.* Reported security incidents directly to NATO incident responders, as well as reviewing first line analyst’s incidents whilst covering the senior position.

* Apply regular device specific updates, patches and backups, and continuously monitoring overall system health.* Troubleshooting client connectivity issues when on-boarding new or replacement appliances.* Applying routing and policy changes as specified by the client during agreed change windows.* Created multiple service documents for the appliances.* Configured and implemented VPN tunnels.* Writing and representing change requests in regular CAB meetings.* Working with vendor support to resolve client incidents/requests.

* Detection and analysis of security alerts via commerical SIEM appliance and in-house behavioural analytic platforms.* Creating reports on network activity observed that is deemed a security risk and recommend remedial action.* Liaise with clients and report on security incidents abiding to stringent SLAs.* Manage and perform small changes to in-house SIEM infrastructure.* Work closely with threat intelligence teams to develop and create new rules for the SIEM software.

* Actioned access requests and troubleshooted account issues through Active Directory and Unix.* Performed remote installation and removal of end user software.* Followed strictly controlled information security procedures.* Closely liaised with high-level security officers and service delivery managers for quick resolution of urgent requests.* Involvement with numerous projects for the National Grid network infrastructure.