Logan Richman Email & Phone Number

Florida, United States

Tampa, Florida, US

New York, NY, US

- Internal / external compliance auditing- DMARC implementation for email domains- Implementation and enhancements of SOAR platform to reduce alert fatigue and incident response times. - NGAV and EDR management (upgrading, rule tuning, efficacy reviews, threat hunting, incident response) - SIEM / log aggregation management- Incident monitoring / response.

New York, NY, US

Tampa, FL, US

• Assisted in managing IBM QRadar SIEM infrastructure, custom rule base, and network hierarchy in a multi-tenant environment.
• Managed firewall security policies and threat prevention profiles.
• Analyzed firewall threat logs for patterns of suspicious activity and escalated to the appropriate teams.
• Compiled monthly service reports outlining trends in traffic and malicious activity.
• Identified hosts infected with malware that may be beaconing to malicious domains to obtain additional payloads.
• Worked directly with customers to identify false-positive alerts and modified firewall / SIEM to reflect appropriate information.

Tampa, FL, US

• Assisted Security Analysts in addressing security incidents within customer networks.
• Monitored firewall logs for suspicious activity and escalated intrusive actions to customers for review.
• Proposed firewall policy changes to implement more restrictive policies on rules that were permitting unexpected traffic.
• Conducted frequent research on newly identified vulnerabilities, attacks and techniques threat actors use to compromise a target.

Tampa, FL, US

• Monitored customer networks and responded to incidents pertaining to degraded or down service.
• Answered inbound calls and handled case creation.
• Escalated business-impacting issues in a timely manner
• Worked with multiple Tier 1 and Tier 2 Internet service providers (AT&T, Verizon, CenturyLink) to isolate and correct service impacting issues.
• Maintained a level of communication with the impacted customer while ensuring proper case documentation.
• Troubleshot broadband and Direct Internet Access circuits including Cable, DSL, T1, Fiber/Ethernet, Fixed Wireless, and cellular connections.