Keith Seymour Email & Phone Number

Texas, United States

Texas, United States

Atlanta, Georgia, Us

This was a six month contract. In this role I was the primary liaison with our MSSP, SecureWorks. I started with onboarding the new provider and worked with system engineers and system owners to onboard their log sources. I also worked with the threat management team to improve our correlation rules as well as identifying opportunities for new correlation rules, integrations, and process improvements.I redesigned the deployment architecture to provide improvements to scalability, control, continuity, and onboarding new log sources.

Tampa, Florida, Us

Worked fully remote while occasionally traveling to customer sites for on-boarding or consulting. I assisted customers with architecture for complex technical solutions as well as meeting security and compliance requirements while providing workable solutions to their business.Most of my time was spent in SIEM Engineering for IBM QRadar and LogRhythm. I performed tasks like deploying SIEMs, conducting routine maintenance, and troubleshooting errors. I also worked on projects to create custom parsers for new log sources and to create custom integrations with other security and inventory products. I worked in Bash, PowerShell, and Python to automate these integrations.

Cincinnati, Ohio, Us

This was a short term contract to complete the initial deployment of QRadar and migration of reporting from Tivoli Compliance Insight Manager (TCIM) to QRadar.This included completing the initial deployment of QRadar to various technologies and developing reports to match the reporting provided by the previous tool TCIM.

Tampa, Florida, Us

This was a short term contract to complete the migration of functionality from RSA enVision to QRadar.This includes moving functionality from enVision to QRadar by creating and tuning alerts and creating reports. I'm also cleaning up log auto-discovered sources in QRadar by identifying duplicates, correcting mis-identified log sources, and identifying log sources from their logs. In addition, I'm reporting on the functionality gap to enVision, as well as the coverage gap to asset data and coverage gap to environment.

Traveling for recreation.

Portland, Or, Us

I am the primary person responsible for tuning and managing the QRadar SIEM. Which includes performing updates, Investigating potential incidents, tuning rules, and provide reporting. Managing McAfee Web Gateway by updating the gateway to current release, managing rules, and resolving issues.Managing McAfee Database Activity Monitor (DAM) which entails updating product, resolving issues with the deployed sensors on UNIX and Windows, and providing support to the internal user population.Manage Axway SFTP Solution (AIX) to include provisioning users, assisting internal users, and resolving technical issues.I also manage various projects including finding a deploying a replacement FTP product and research as required.

Traveling for recreation.

Columbus, Georgia, Us

Assist in developing vulnerability assessment programRevamp previous process building reporting capability and increased accuracyProvide recommendation on tools and techniques to produce automated processIdentify and close gaps with industry standards in vulnerability managementLiaise with Information Technology to provide better communication and relationship managementAssist in developing threat assessment programExpand on immature processEvaluate intelligence resources Initiate linkage between threats and vulnerability and compliance risks Assist in developing compliance program Execute incident response to MSSP and internally identified threats Provide forensic services in support of legal requirements

Norwalk, Connecticut, Us

Design security solutions and test products for those solutions Evaluate current controls and act as subject matter expertRecommend low cost solutions to business and security challenges Research current and future threats to information resourcesAct as project manager for global projects ensuring the projects run successfully. Architect Custom Automated Compliance (GRC) tool featured in InformationWeek's 500 Great Ideas Weblog under 20 Ideas to Steal.http://www.informationweek.com/blog/main/archives/2008/09/xeroxs_path_to.html Develop requirementsResolve technical issues Manage NetIQ product and deployment world wide

Frisco, Texas, Us

Understand systems and networks more thoroughly than operational personnel Test and evaluate security solutions for the entire corporation and provide written recommendations for deploymentProvide security solutions to meet business need in the areas of policy development, security architecture, and vulnerability assessmentResearch, analyze, experiment, and apply different means of system compromise and penetration testing in a lab environment Conduct external vulnerability scans including web application assessment for enterprise; provide written report of findings to both senior management and technical staffProvide documentation to technical staff and senior management on developments of potential security issuesProvide technical investigative support in investigations including forensic investigations on policy infractions, and intrusionsReview MSSP network and host monitoring, traffic analysis, and intrusion detection

Frisco, Texas, Us

Provide support for LAN Administrators Manage projects to ensure timely completion and clear communication Assist data communications group in troubleshooting complex problems Develop and deploy automated application installs and upgrades using Novell’s ZEN and Microsoft custom installs to keep 1,500 desktops current Propose and implement low cost solutions to aid business units Perform security audits for all systems

Frisco, Texas, Us

Solve complex issues relating to client server interaction Assist data communications group by gathering information about problemsDesign logical structure for network Create and ensure the correct operation of backup jobs Direct user support RAS client configuration and troubleshooting Manage file storage archiving and retrievalSecurity auditing for Novell Remote management of servers in enterpriseInstall and configure network printers

Solve complex issues relating to client server interactionTroubleshoot and resolve networking issues Design physical and logical structure for network Create and ensure the correct operation of backup jobs Direct user support Install and configure first RAS clients on network Manage file storage and retrieval on various systems including AS400Security auditing for Novell, Remote management of servers Install and configure network printers.

Setup new computers Install new hardware Install software Provide direct user support Ensure reliable operation of backup jobs

Giac Intrusion Analyst (Gcia)

Education record