Garrett Martin Email & Phone Number

Appleton, Wi, Us

Oshkosh, Wisconsin, Us

• Led the Insider Risk team in identifying and mitigating internal threats and reducing insider incidents.• Directed the development and continuous optimization of Security Orchestration, Automation, and Response (SOAR) solutions, achieving significant improvements in mean time to resolve (MTTR) and incident response capabilities.• Oversaw the creation of automated workflows, significantly reducing manual security tasks and improving overall efficiency.• Led the Vulnerability Management team in the prioritization, remediation, and timely patching of critical vulnerabilities, significantly enhancing the organization's security posture.• Helped to Implement an Attack Surface Management program, leading to identification and reduction in exposed assets.• Guided the Detection Engineering team in the continuous development of advanced detection rules, improving threat detection accuracy and reducing false positives.• Led a manager overseeing the Security Operations Center (SOC) and Incident Response teams, ensuring rapid, effective responses to security incidents.• Led a Security Engineering team responsible for maintaining and enhancing security infrastructure, ensuring high availability, scalability, and robust protection against evolving cyber threats.

Oshkosh, Wisconsin, Us

• Led a team of cybersecurity professionals in a 9 to 5 Security Operations Center (SOC) and incident response environment.• Oversaw the daily operations of the SOC and ensured that security incidents were detected, investigated, and resolved in a timely manner.• Worked with cross-functional teams to develop and maintain a robust incident response plan that aligned with industry best practices and regulatory requirements.• Collaborated with internal stakeholders to identify and mitigate security risks associated with new and emerging threats.• Analyzed security metrics and reported on SOC performance and key security trends to senior leadership.• Stayed current on the latest threats, vulnerabilities, and security technologies to ensure the SOC remained effective in defending against cyber threats.• Manage relationships and capabilities with Managed Detection and Response (MDR) service providers to supplement internal capabilities and ensure 24/7 coverage for incident response.

Oshkosh, Wisconsin, Us

• Respond to security events and incidents by performing thorough triage on events reported by the SIEM and various detection devices to filter out false positives and known, accepted activities.• Analyze IDS/IPS alerts and possess in-depth knowledge of Windows-based attacks to identify possible lay-of-the-land attacks.• Conduct host and network forensics, log analysis, and malware triage to determine the root cause of incidents during incident response investigations.• Identify indicators of attack and compromise and use this knowledge to develop, document, and implement playbooks, capabilities, and techniques for incident response.• Perform security triage and analysis on endpoint, server, and network infrastructure, collaborating closely with the threat intelligence team.• Actively work to immediately contain and resolve incidents in the short-term, implementing necessary measures and processes.• Stay up-to-date with the threat landscape, emerging security threats, and vulnerabilities, using this knowledge to inform future incident response strategies.• Develop automation within the SOAR platform to drive efficiency for the incident response team.

Bangalore, Karnataka , In

• Functioned as a subject matter expert (SME) and product owner for Zscaler Internet Access and Private Access, a SaaS proxy and zero-trust remote access solution.• Utilized scripting languages to automate processes, parse data, and audit existing products, driving increased efficiencies within the organization.• Led an organizational change to remote access, deploying a Zero Trust Network Access model to over 40,000 customers utilizing Zscaler Private Access.• Conducted day-to-day support activities to ensure operational excellence of services, including communicating with customers, providing troubleshooting support, managing escalation protocols, and resolving problems.• Collaborated with business change leaders to coordinate large changes, ensuring proper communication, alignment, and mitigation to minimize the impact on end-users.• Managed configuration and deployment to over 150 CentOS servers using Ansible.• Provided support and project-related deployments for Palo Alto firewalls, GlobalProtect, and Fortinet firewalls.• Utilized Wireshark to conduct in-depth troubleshooting of latency, application, and other network-related issues.• Offered intermediate-level support for network-related AWS aspects, such as EC2s, Lambda, CloudWatch, and basic VPC functions.• Leveraged Splunk for alerting, trending, log data manipulation, and reporting purposes.

Neenah, Wi, Us

Neenah, Wi, Us

• Utilized Tanium and other advanced security tools to detect, identify, and report possible intrusions, anomalous activities, and misuse, ensuring the highest level of security for the organization.• Designed and successfully implemented network segmentation utilizing Palo Alto firewalls to protect non-trusted medical assets at over 30 locations.• Developed an in-house IP address management solution using PowerShell and various APIs, integrating functionality with Cisco ISE and SolarWinds to improve overall network management.• Provided continuous support for all organization security technologies, ensuring that all systems were up-to-date and functioning at optimal levels.• Managed and deployed SSL decryption using F5 appliances, enabling secure and effective communication across the network.• Investigated email threats using Trend Micro IMSVA and implemented appropriate measures to mitigate risk.• Spearheaded proof-of-concept (POC) and beginning deployment of Digital Guardian DLP, strengthening data security across the organization.• Leveraged Unisys Stealth for East-to-West traffic micro-segmentation, enhancing security protocols and minimizing potential risks.

Wichita, Kansas, Us

• Provided first-level support for LAN, WAN, and SD-WAN (Viptela) equipment across 600+ sites, ensuring seamless connectivity and efficient network operations.• Identified and developed automation for a manual process of bouncing PoE cameras based on alerts, improving overall network performance and reducing downtime.• Collaborated with global teams to troubleshoot and resolve various network-related tickets from end-users and IT counterparts across data centers and remote sites.• Configured and deployed equipment from industry-leading vendors such as Cisco, HP, and Ubiquiti, maintaining cutting-edge technology across the network infrastructure.

Wichita, Kansas, Us

• Managed team resources, delegated projects, and optimized resource utilization within Planview, ensuring maximum efficiency and productivity.• Developed comprehensive reports to visualize and trend metrics across multiple data centers, providing critical insights to inform strategic decision-making.• Maintained all fiber and copper infrastructure for storage, server, and network equipment, ensuring the highest level of performance and reliability.

Wichita, Kansas, Us

• Led a project to onboard new firewall monitoring procedures, including training and documentation.• Automated data center access request procedures using SharePoint and JavaScript, streamlining processes and reducing turnaround time.• Demonstrated strong business etiquette and communication skills within a corporate environment, effectively communicating with internal and external stakeholders.

• Solely administered endpoints, iOS devices, Meraki MDM, Windows servers (AD, DNS, File, DHCP), Cisco switches, Sophos UTM, and wireless, ensuring optimal performance and uptime.• Developed a standard support process and implemented a ticket management solution, ensuring timely resolution of issues and improved customer satisfaction.• Successfully developed the first department budget in seven years and maintained strong vendor relationships, ensuring cost-effective and efficient operations.

Bachelor Of Science (Bs), It Security

Associate'S Degree, Software Development

Information Systems And Cyber Security, It

Network Systems Administration, It