Mark Wright Email & Phone Number

Midland, MI, US

Remote

Remote

• Administer LogRhythm SIEM Deployment.
• Investigate All Suspicious Activities.
• Assess risk factors and advise on vulnerabilities to attack from a variety of sources and procedures for proactive remedies to security shortfalls.
• Research, develop and keep abreast of testing tools, techniques, and process improvements in support of security detection and incident response.
• Assist clients with integrating security practices with many different regulations/standards.
• Conduct Security Training and Awareness seminars and classes.

Mason, Michigan

• Prioritize operational monitoring and analysis of the defensive cyber security platform.
• Implement tactical response to emerging cyber threats
• Implement new technology deployments and system integration testing
• Identify technology trends and evolving social behavior that may support or impede the success of the business
• Perform computer security incident triage to include determining scope, urgency, and potential impact; identify the specific vulnerability and make recommendations to enable expeditious remediation
• Detect and analyze potential intrusions and other security incidents

Midland Michigan

• Responsible for new and innovative ways to identify threat in the environment.
• Developed Standard Operating Procedures and creation of new alerting and monitoring, trained L1, L2 and L3 CERT members.
• Developed and maintained hundreds of SIEM rules focused on data exfiltration and Cyber-attacks.
• Administrated Application Whitelisting environment on 100,000+ endpoints. Was responsible for creation and maintaining of white’ and ‘black’ lists.
• Administrated Endpoint Forensics Applications.
• Responsible for Proof of Concept on Endpoint Security Software for recommendations to management on new possible solutions.

Midland, Michigan

• Develop and implement new alerts using the SIEM, Application whitelisting, or network Security Analytics systems.
• Query logs in several security products for IOCs from various sources (such as government and industry reports, internally developed IOCs, etc), eliminate false positives, and remediate as needed.
• Analyze malware in various sandboxing tools to gather IOCs for further investigation.
• Support security investigations, incident response, and security compliance initiatives
• Use Network packet capture data and network analytics tools to analyze events, export PCAPs, and draw conclusions.
• Level 2 Office365 support, including on-call. Active Directory and Exchange-related end-user support; submitting problem tickets to Microsoft.

Midland, Michigan

• Administer a global deployment of OpenVMS VAX systems that were deployed within Manufacturing and Chemical Processing plants.
• Engagement with local support contacts in some cases when hardware replacements where needed.
• Create new scripts and procedures for VMS Level 2 support, using Wiki and Sharepoint software.
• Monitored critical alerting at an incident level
• Implement run-the-business changes through change management process.

Midland, Michigan

• Network Engineering (Fixed Wireless (RF), Transport, Route/Switch)
• Network Provisioning
• Service Provider Systems Administration (Web/Mail/DNS/VoIP at scale)
• Tech support for end users
• Hardware Deployment/Implementation (Core, Transport, Edge)
• Programming (HTML/ASP/PHP)

Midland, Michigan

• Manage IT Infrastructure in general, Virtual Machines, Security Badge System, Network Devices.
• Created Wiki Documentation for procedures that were previously undocumented.
• Provided Desktop Support on an on-call basis.
• Ran cables and punched lines.
• Vetted and Updated software on endpoints.