Katrina Haddon Email & Phone Number

Provide proactive and reactive security monitoring for a growing environment; support incident responses and provide root cause analysis support for incidents.Provide assistance in recovering from security breaches; participating in investigation and remediation of security incidents; establish configuration policies for security technologies. Review aggregated server logs, firewall logs, intrusion prevention logs, and network traffic for unusual or suspicious activity. Conduct research on emerging threats in support of security enhancement and development efforts; Working as part of a team, performing deep-dive incident analysis and determining if critical systems or data sets have been impacted. Functional knowledge of TCP/IP protocol suite, LAN/WAN technologies, switching, routing, VoIP and Telephony technologies, firewalls and VPN, intrusion prevention systems (IPS), as well as working with vulnerability assessment and patch management tools. Functional knowledge of UNIX, Linux, Apple and Windows technologies. Functional knowledge of operating protocol analysers and analysing output.  experienced in performing monitoring, analysis and recovery procedures coupled with performing deep-dive incident analysis by correlating data from various sources. functional knowledge and experience of using tools for security monitoring (e.g. Splunk, QRadar, Intel McAFee, ArcSight) data analytics (e.g. ELK stack) and security case management (e.g. SNOW).  Experience in vulnerability management tools (e.g. Qualys, Nmap, Nessus, Nexpose)