Matthew Bone Email & Phone Number

Denver, Colorado, Us

Securing JHI’s many platforms including Carbon Black, email and apps via Defender for Cloud, Sumo Logic, Tenable, Palo Alto, IBM SOAR, Azure/AWS.

Boulder, Co, Us

- Maintained and enhanced the security program and posture by analyzing and tuning security tools, policies, and procedures.- Qualys administrator: update/remove agents, perform regular scans and troubleshooting, worked with desktop and infrastructure team to reduce number of vulnerabilities on servers by 70% which resulted in an annual external pen test finding “0” (zero) vulnerabilities.- Administered, maintained other security tools such as Sophos (XDR, URL/application control) and Microsoft 365 Defender- Updated tools regularly with IOC’s from our security feeds for proactive protection against the latest threats- Conducted security training via phishing campaigns (Knowbe4 / PhishER) to improve the company’s security posture- Performed T3 investigations on security events utilizing SIEM/MDR (SecureWorks), IDS/IPS, PhishER, Microsoft 365 Defender Cloud, Azure, XDR / AV (Sophos), Active Directory, RedCloak, Okta, and other tools

Providing I.T. Security, consulting and Administrative services for a Denver based startup. Remediated and secured the website and plugins, administered the accounting system, Office 365, implemented disaster recovery and backup procedures, integrated website/inventory and accounting software, resolved host based security issues and provided guidance and research into products, labeling and distribution in US, PCI compliance officer for compliance related issues

Chicago, Il, Us

• Visibility team: Migration/build out of QRadar and Symantec SIEMs. Forward, and ingest logs for on-premises and Cloud logs (Servers, workstations, firewalls, Bluecoat, Proofpoint). Then monitor and tune logs, perform upgrades and maintenance when required. Milestone: Gained 90% visibility of ALL UAL’s assets within a 6-month deadline.• SecOps team: Administrator of Apcon / Gigamon network aggregation switches, Sourcefire / Cisco IDS/IPS, and Palo Alto / CheckPoint Provider-1 Firewalls (SPLAT, *NIX, Crossbeam). Regularly updated yara and snort signatures (IDS/IPS). Stakeholder in the change management process: engineered, vetted, approved, optimized, and implemented policy changes using Tufin and Firemon. Reduced United’s largest policy by 30% using Tufin; time to push down to 20 from 45. Migrated legacy users off Cisco and Nortel VPNs to Check Point. • GRC / Compliance / Risk Management: assist in audits. Research, respond and remediate vulnerabilities. • SOC / Incident Response: L3 Analyst, Administrator and Team Lead - Built out new IR team, provided cyber security analysis, detection and remediation of malicious activity, threat hunting, and run book development. Security Tools: CyberArk, Crowdstrike, QRadar, ServiceNow, Symantec and more.• Data Center Migration: Security team liaison for high visibility project to ensure smooth migration of all hardware and application migrated from old to new Data Center

Washington, Dc, Us

Supervisor, 2nd Shift Lead and Alternate Project Manager for the Network Defense Operations group in the V.A.’s 24x7 NSOC (Network Security Operations Center). Responsible for monitoring and querying the Security technologies including Splunk, NIPS, HIPS, Web Washer, McAfee Enterprise Anti-Virus, etc. on the V.A.’s 500,000+ node enterprise network for malicious traffic and patterns, correlation of sensor data, notifying the owners of the affected assets, and ensuring the appropriate remediation has taken place. Also responsible for creating new documentation and procedures which were used for training and various deliverables including those presented to Congress.

Migrate International sites from Check Point Mesh VPN to MPLS; Document networks (routers, switches, cabling, rules, etc.) of existing sites; work with other vendors such as E.D.S. (HP) to co-ordinate new technology installs and LAN refresh at sites and review, document and verify Power and cooling requirements for each site fit new standards.

Provided consulting services to clients in the Health Care, Financial, Real Estate Legal and other markets. Client portfolio: Lincoln Park Hospital, Bethany Methodist Hospital, Draupnir LLC., Petersen Brands, Eastek International Corporation, Park Construction Group, Aspen Homes, Benchmark Mortgage, Cervantes Law Firm, Interstate Asphalt, Domotek Floor Warming systems, and National Autonomous University of Mexico, Retirement Services Group and Willamette Management Associates.Reseller and MSP of Check Point firewall/VPN and Safe@Office, Polycom, Dell and VOIP systems: Provided installations, migrations, service and support for all the above. Microsoft: Performed server installs, migrations and support on full line of products (SBS, domain controller, DNS, email, Active Directory, WSUS, Group Policies) along with Backup, Anti-virus solutions Forensic and data recovery services.Citrix/Xen: install/configure XenServer farms to publish applications using XenApp and plug-ins.Transitioned clients off traditional PBX’s to Open Source IP PBX’s.

Lead Digital Forensic and Data Recovery Expert; built and managed the firm’s lab. Infrastructure Design, Implementation, Troubleshooting and Support. Evaluated a municipal network security infrastructure where I designed a fault tolerant Check Point firewall solution and then provided customized training on maintaining and operating it. Successfully performed upgrades to Microsoft NT/2000 Domains and Exchange 5.5/2000 environments. Performed Network Security and Penetration Testing / Compliance for SOX, GLBA, etc. Network Administrator for Microsoft/Novell LAN/WAN.

Ccse

Ccna

Ceh (Certified Ethical Hacker)

Ceh

Ence, Cyber Forensics

Mcse

Gsec