Mark Wright Email & Phone Number

Midland, Mi, Us

Remote

Remote

• Administer LogRhythm SIEM Deployment.• Investigate All Suspicious Activities.• Assess risk factors and advise on vulnerabilities to attack from a variety of sources and procedures for proactive remedies to security shortfalls.• Research, develop and keep abreast of testing tools, techniques, and process improvements in support of security detection and incident response.• Assist clients with integrating security practices with many different regulations/standards.• Conduct Security Training and Awareness seminars and classes.• Maintain detailed security related documentation.

Mason, Michigan

• Prioritize operational monitoring and analysis of the defensive cyber security platform.• Implement tactical response to emerging cyber threats• Implement new technology deployments and system integration testing• Identify technology trends and evolving social behavior that may support or impede the success of the business• Perform computer security incident triage to include determining scope, urgency, and potential impact; identify the specific vulnerability and make recommendations to enable expeditious remediation• Detect and analyze potential intrusions and other security incidents• Automation of tasks in the cyber platform, such as alerts, tickets, and artifact ingestion

Midland Michigan

• Responsible for new and innovative ways to identify threat in the environment.• Developed Standard Operating Procedures and creation of new alerting and monitoring, trained L1, L2 and L3 CERT members.• Developed and maintained hundreds of SIEM rules focused on data exfiltration and Cyber-attacks.• Administrated Application Whitelisting environment on 100,000+ endpoints. Was responsible for creation and maintaining of white’ and ‘black’ lists.• Administrated Endpoint Forensics Applications.• Responsible for Proof of Concept on Endpoint Security Software for recommendations to management on new possible solutions.• Managed a User Awareness program, ‘Suspicious Email Response Processes’. Mined potentially harmful or misleading Emails for Indicators of Compromise

Midland, Michigan

• Develop and implement new alerts using the SIEM, Application whitelisting, or network Security Analytics systems.• Query logs in several security products for IOCs from various sources (such as government and industry reports, internally developed IOCs, etc), eliminate false positives, and remediate as needed. • Analyze malware in various sandboxing tools to gather IOCs for further investigation.• Support security investigations, incident response, and security compliance initiatives • Use Network packet capture data and network analytics tools to analyze events, export PCAPs, and draw conclusions.• Level 2 Office365 support, including on-call. Active Directory and Exchange-related end-user support; submitting problem tickets to Microsoft.

Midland, Michigan

• Administer a global deployment of OpenVMS VAX systems that were deployed within Manufacturing and Chemical Processing plants.• Engagement with local support contacts in some cases when hardware replacements where needed.• Create new scripts and procedures for VMS Level 2 support, using Wiki and Sharepoint software.• Monitored critical alerting at an incident level• Implement run-the-business changes through change management process.

Midland, Michigan

• Network Engineering (Fixed Wireless (RF), Transport, Route/Switch)• Network Provisioning• Service Provider Systems Administration (Web/Mail/DNS/VoIP at scale)• Tech support for end users• Hardware Deployment/Implementation (Core, Transport, Edge)• Programming (HTML/ASP/PHP)• Some Sales, Business Development and Marketing/Promotions

Midland, Michigan

• Manage IT Infrastructure in general, Virtual Machines, Security Badge System, Network Devices.• Created Wiki Documentation for procedures that were previously undocumented.• Provided Desktop Support on an on-call basis.• Ran cables and punched lines.• Vetted and Updated software on endpoints.