Liam S. Email & Phone Number

Cape Town, Wc, Za

Cape Town, Western Cape, South Africa

Investigated security incidents.Performed security analysis of bespoke applications.Conversed with employees, analysed the previous penetration test reports and automated audit tools outputs to understand the security posture.Made recommendations on how to improve security posture of the cloud infrastructure.Improved security culture by explaining security problems and solutions as well as the underlying principles to site reliability engineers and software developers.Created and delivered security training.Created pull requests for the cloud configuration to remedy security findings.Worked with the Android team to investigate and prioritise fixing of security findings.Engaged with web front end team to improve security posture of web app and site.Performance troubleshooting of AWS RDS (PostgreSQL).

Cape Town Area, South Africa

Advised and worked with technology teams, specifically software developers, DevOps/SRE and IT, to implement and improve security. Liaised with external penetration testers and software developers, SREs and IT team for their respective areas.Provided security advice to software developers in the design or implementation stage.Had pair programming sessions with software developers to implement CSP and other security headers for existing micro-service apps. Conducted web app security assessment and handed over findings to developers. Assessed and provided guidance on complying with GDPR requirements for internal and third party data collection, storage and processing.Reviewed business team processes and data handling to identify deficiencies. Recommended ways to mitigate deficiencies.Engaged with non-technical and technical business teams to remove legacy code and practices to improve security.Investigated suspected threats, for example, phishing emails and suspicious network traffic.Improved configuration of Darktrace, Threatstack, Falcon Crowdstrike to reduce false positives. Improved detection by testing and noting a lack of detection for certain offensive security tools and had their traffic added. Updated the DKIM, SPF and DMARC records, and reduced whitelisted domains in Mimecast. Configured Kibana reports in ELK stack to reveal TLS protocol version usage by clients to facilitate hardening TLS. Configured visualisations and dashboards in Kibana in ELK to show spikes in failed logins. Showed developers how to do the same which they did.Conducted threat modelling exercise to identify high risk areas of the business. Created security baselines for AWS, networks, Linux and Windows servers, Macs and laptops. Compiled incident response playbooks for commonly encountered scenarios.Created and delivered information security training to staff. Mentored new security team member.

Cape Town Area, South Africa

As part of the DevOps virtual team used Ansible to make VMware do things that it can not do out the box and provided feedback on the IT security policy.Determined and resolved the cause of a memory leak on Jenkins. Recovered Jenkins from a crash on startup, i.e., a "rolling restart". Reconfigured firewall port redirection for Jenkins server after power failure had caused some dynamic configuration to be lost resulting in the server being inaccessible. Upgraded Jenkins.Updated Jenkins build scripts written in Groovy and Scriptler to allow builds from all available branches in GIT. Source control using GIT (Gitlab) and build management using Jenkins. Performed template driven development in a bespoke language written in JSON, fixed, enhanced and extended the user interface and the back-end logic for a product used by telecommunication companies to manage unified communications, e.g., VOIP phones, lines, voicemail, etc. Provided design input during sprint planing and backlog grooming sessions. Wrote automated API tests in XML and performed test suite and test case management with TestLink.Used agile software development methodology with SCRUM and performed operational tasks using Kanban.Debugged, trouble-shot, fixed bugs and created patches.

Cape Town Area, South Africa

Understood the IT requirements of the business. Decided how the technical infrastructure of VOSS needed to be improved and / or expanded.Implemented DMARC using SPF and DKIM to prevent email spoofing. Deployed intrusion detection systems. Hardened VPNs and servers, e.g., scanned them and configured stronger encryption algorithms.Maintained and upgraded OS and network security, installed and upgraded operating systems, improved network configuration, virtualised systems, configured web-servers and databases, administered authentication and name resolution, maintained backups. Migrated systems, wrote, improved or fixed shell scripts, firewall rules, etc. Built, upgraded, configured and/or troubleshot Gitlab, Jenkins, etc. servers for Software Engineering department. Used Zabbix to monitor and wrote shell scripts to report on hundreds of VMs.Performed general planning, found and hired talented staff, mentored and trained up staff, performance managed staff, improved business processes, drew up budgets, approved purchases, engaged with vendors.Ensured that the IT department offered quality infrastructure, advice and support to the business.

Cape Town, South Africa

Supported the VOSS Unified Communications / Cisco VOIP management platform for customers in the EMEA and North America regions.Installed, upgraded and recovered platforms.Found and resolved faults by reading the code and log files, and querying the database.Investigated, logged and handed over bugs to Application or Platform Development teams as necessary.Strengthened platform skills within the support team by communicating, demonstrating and documenting better ways of working, e.g., shell scripting, troubleshooting.Trained up the new US-based support team.Demonstrated platform functionality to customers, e.g., disaster recovery tests (fail-over, backup and restore, etc), SNMP, etc.Documented platform architecture.Tested for NRFU and QA purposes as required.

Cape Town Area, South Africa

Improved security on servers, e.g., reconfigured them from plain-text to encrypted protocols. Advised other teams on how to improve security. Hardened servers through minimised installations and disabled unused services. Formulated responses to address audit findings.Researched, implemented and communicated new and improved ways of working. E.g., Live Upgrade, ZFS, use of zones for containerisation.Performance tuned servers which included the use of DTrace.Wrote shell scripts to automate manual processes.Used Solaris Zones to containerise computing environments and optimise hardware usage and reduce administration time.Migrated system to ZFS to allow for better disk utilisation, reduce administration time and improve integrity.Added, removed and configured EMC SAN disk for Solaris servers. SAN migrations.Created and enhanced recommended system build standards.Staged new or re-staged existing servers to latest system build standards.Operational responsibility for various bespoke (custom) systems.Analysed and documented existing systems.Found, investigated and responded to server hardware faults. Liaised with suppliers of hardware support to fix system.Performed capacity planning, e.g., SAN disk, memory, disk and HBA IO throughput.Assisted other teams to resolve problems.Built or changed existing systems to support service availability across multiple sites.Tested Business Continuity Plans / Disaster Recovery.Failed over and then recovered failed systems before switched back to original systems after hardware failure.Migrated physical and virtual servers between data centres to increase efficiency.Evaluated suppliers and vendors.Conducted Proof of Concept exercises. Trained junior staff and interns.Handled escalated calls for network performance management systems.Administered fifty physical Solaris version 9 and 10 servers, some worth almost a million dollars apiece.Linux system administration for 9 physical servers.

Cape Town Area, South Africa

The duties of this role were a subset of those listed above for Specialist: Systems.

Cape Town Area, South Africa

The duties of this role were a subset of those listed above for Senior Technical Officer.

Configured templates for premium SMS.Performed desktop support.

Administered Linux servers.Performed technology research.Website development with HTML and CSS.Desktop support for Windows and Linux.

Masters, Computer Science (Information Security)

Information Security with course work encompassing research methodology, digital forensics, enterprise security, malware analysis.

Bachelor Of Commerce (Honours), Information Systems

Post Graduate Diploma, Computer Forensics

Bcom, Information Systems, Business Management, Economics