Kurt Wolfe Email & Phone Number

Mountain View, California, US

Cleveland, OH, US

• Demonstrated expertise in leading and executing sophisticated threat hunting initiatives as a key member of the Cyber Threat Intelligence (CTI) and Security Operations Center (SOC) team. Leveraged (EDR) data and.
• Regularly utilize an extensive suite of solutions to safeguard our infrastructure. These include, but are not limited to, CrowdStrike Falcon, Proofpoint, Abnormal Security, Zscaler, Qualys, Dragos, and Wazuh. By.
• Conduct global-scale incident response forensic investigations, encompassing user systems and Industrial Control Systems (ICS) on multiple operating platforms including Windows, Linux, and OSX.
• Proficient in implementing and executing security solutions on major cloud platforms (GCP, Azure, AWS)
• Demonstrated expertise in crafting clear, concise reports for technical audiences and executive management. Proficient in translating complex cybersecurity concepts into accessible language for various stakeholders.
• Knowledgeable on utilizing open-source toolkits from GitHub for OSINT, red team, blue team, DFIR, and artificial intelligence purposes. For example I implemented Capev2 (fork of cuckoo) in a private azure tenant to.

Beachwood, Ohio, US

• Administer Security Information and Event Management (SIEM) functionalities in Splunk Enterprise Security, ensuring efficient event collection, correlation, and analysis as a security contractor.
• Collaborate with internal and external teams on designing, developing, testing, and maintaining security use cases in Splunk Enterprise Security across various clients and environments to enhance threat detection and.
• Conduct thorough testing of security use cases to ensure accuracy and effectiveness.
• Ensured high-fidelity delivery of content through meticulous tuning and testing processes.
• Provide ongoing support for use case maintenance, updates, and optimization.
• Contribute to data normalization efforts within Splunk Enterprise Security to improve data consistency and accuracy. Leveraging CIM compliance and Splunk best practices.

Beachwood, Ohio, US

• Supervised and managed the day-to-day operations of the Security Operations Center (SOC)
• Organized frequent educational workshops and mentoring programs to encourage continuous learning and skill development among team members.
• Strategically expanded the team through the recruitment of new hires or engagement of external experts to enhance the organization's capabilities.
• Developed and implemented Security Operations Center (SOC) performance goals aligned with organizational objectives
• Established key performance indicators (KPIs) to measure SOC effectiveness and efficiency as well as configured regular reporting and analysis of SOC metrics to identify trends and areas for improvement
• Implemented automation and orchestration tools to streamline SOC processes and improve incident response times

Beachwood, Ohio, US

• Prioritized and addressed security incidents in multiple client Splunk environments by performing triage, investigation, and escalation as necessary.
• Performed comprehensive investigations and proactively searched for potential threats on behalf of clients utilizing Splunk and extremely large datasets.
• Regularly analyzed complex data sets to identify patterns, anomalies, and trends using statistical analysis, machine learning algorithms, and other data analysis techniques.
• Performed a comprehensive audit and risk assessment utilizing Splunk and security appliance data for clients.
• Contributed to enhancing security alert effectiveness by distinguishing and suppressing false positives
• Helped the management of our Intrusion Detection System (IDS) sensors, including updates and fine-tuning of rule sets for optimal performance.