Mark T. Email & Phone Number

Reston, VA

• Senior Security Engineer, 2009 – PresentInformation Security engineer responsible for testing tools for viability within the organization, installation configuration and maintenance of security tools, investigation of.
• Responsible for the upgrades of Cisco Firepower NGIPS, FireEye, Symantec Security Analytics (Solera), Cisco (Lancope) Stealthwatch, Tufin SecureTrack, Gigamon gigavue and Guidance Software Encase Enterprise ecosystems.
• Configured and maintaned McAfee ESM SIEM system as the cornerstone for tool generated incident response events.
• Assumed role of incident response manager when the incumbent incident response manager left the company. Managed 3 employee team to investigate incidents.
• Ran incident response commander operations when large scale emergency patching was required.
• Completed the installation and configuration of Sourcefire IDS systems to create a viable alerting tool.

• Managed Services Engineer, 2006 – 2009Tier III support and operations of managed devices and services with focus on Security.
• Primary Operations engineer for the upgrade of all managed NetApp NetCache devices and the migration of management for these devices to a centralized platform (NetApp's Data Fabric Management Server).
• Created, Tested and Documented procedures for upgrading Checkpoint NG-AI R55 firewall to NGX R61 including stand alone and HA pairs. Upgrade project has had a nearly 0% failure rate for firewall upgrades utilizing the.
• Designed and implemented failover IPSEC tunnels using route based VPN tunnels on Checkpoint firewalls.
• Monitor and work tickets based off of IDS security events including researching suspicious activity and configuring and modifying filters in order to create a more reliable detection system.
• Created, Tested and Documented procedures for rebuilding Checkpoint NG-AI firewalls in case of hardware replacement due to catastrophic failure.

• Security Operations Center Expert, 2002 – 2005Second level support and operations of security devices with project leadership roles. Auditing and investigations of internal servers and services.
• Engineered, built and maintained proactive syslog server allowing the SOC to easily monitor activity on over 70 servers.
• Team lead for the operation and maintenance of Checkpoint NG Firewalls providing protection to the management network.
• Operated and Maintained Cisco PIX firewalls including evaluation of change requests and troubleshooting of traffic flow issues.
• Administered the OSPF route redistribution of networks and subnets located in the DMZ of the Checkpoint/Nokia firewalls.
• Created auditing processes and procedures for Unix servers. Utilized these processes and procedures to audit servers and bring them into security policy compliance.