- Internal / external compliance auditing- DMARC implementation for email domains- Implementation and enhancements of SOAR platform to reduce alert fatigue and incident response times. - NGAV and EDR management (upgrading, rule tuning, efficacy reviews, threat hunting, incident response) - SIEM / log aggregation management- Incident monitoring / response- Phishing / malware analysis utilizing dynamic sandbox tools- SAST and DAST scanning for web applications- Host and network vulnerability scanning - Gap / risk assessments for security policy and infrastructure

• Assisted in managing IBM QRadar SIEM infrastructure, custom rule base, and network hierarchy in a multi-tenant environment. • Managed firewall security policies and threat prevention profiles. • Analyzed firewall threat logs for patterns of suspicious activity and escalated to the appropriate teams.• Compiled monthly service reports outlining trends in traffic and malicious activity. • Identified hosts infected with malware that may be beaconing to malicious domains to obtain additional payloads.• Worked directly with customers to identify false-positive alerts and modified firewall / SIEM to reflect appropriate information.

• Assisted Security Analysts in addressing security incidents within customer networks.• Monitored firewall logs for suspicious activity and escalated intrusive actions to customers for review.• Proposed firewall policy changes to implement more restrictive policies on rules that were permitting unexpected traffic.• Conducted frequent research on newly identified vulnerabilities, attacks and techniques threat actors use to compromise a target.

• Monitored customer networks and responded to incidents pertaining to degraded or down service.• Answered inbound calls and handled case creation.• Escalated business-impacting issues in a timely manner• Worked with multiple Tier 1 and Tier 2 Internet service providers (AT&T, Verizon, CenturyLink) to isolate and correct service impacting issues. • Maintained a level of communication with the impacted customer while ensuring proper case documentation.• Troubleshot broadband and Direct Internet Access circuits including Cable, DSL, T1, Fiber/Ethernet, Fixed Wireless, and cellular connections. • Troubleshot multiple types of networking equipment including Cisco IOS router/switches, Cisco Meraki firewalls, Cradlepoint/PepWave cellular routers, Arris/NetGear modems.