Mark Roenicke Email & Phone Number

Salt Lake City, UT, US

Sandy, Utah, United States

• Developed and maintained proprietary health monitoring solutions for SIEM and EDR technologies using Git/CICD.
• Scripted custom solutions in Python, Bash, and PowerShell to streamline workflows and enhance service effectiveness.
• Conducted thorough code reviews with teammates to ensure reliability and fault tolerance of the codebase.
• Interacted with API endpoints of various security technologies such as Splunk, Google Chronicle, QRadar, Cortex, Cribl, and others to integrate and monitor data effectively.
• Served as a subject matter expert and senior technical resource within the engineering department.
• Managed, secured, and utilized metric data from thousands of SIEM and EDR components.

Lehi, Utah, United States

• Primary escalation point and SME for true-positive SIEM engineering issues.
• Leveraged multiple log ingestion methods (TCP/UDP, API, HEC, rsyslog/syslog-ng, file monitor, and scripted).
• Created Bash and PowerShell scripts to automate previously manual and repetitive tasks such as installing/updating software, bulk updating Splunk configurations, interacting with the QRadar log source management API.
• Collaborated with Incident Response and Detection teams to tune/update alerts and regex parsers and ensure optimal performance of security content.
• Wrote new documentation and updated existing knowledge base articles to prevent knowledge silos.
• Created the expedited health assessment template and associated dashboard to significantly reduce time to complete and increase technical depth of scope.

Lehi, Utah, United States

• Troubleshot and resolved issues within client SIEM environments (Splunk, QRadar, LogRhythm, Exabeam, and Azure Sentinel)
• Utilized ServiceNow to ensure timely resolution of critical issues.
• Worked daily on CentOS and RedHat backend issues related to SIEM operations.
• Contributed to documentation and knowledge base articles to reduce average MTTR.
• Interacted with SIEM vendor support to troubleshoot, and resolve issues.

Remote

• Developed and managed the company's e-commerce website to market, sell, and ship furniture nationally.
• Implemented industry standard security protocols.
• Managed physical networking hardware including routers, switches, and access points.
• Increased organic traffic by 20% per year by updating metadata and keywords to increase SEO rank.
• Increased sales by 25% annually by targeting less price-sensitive customers who valued personal service.