Matthew T. Email & Phone Number

Land O' Lakes, Fl, Us

Remote, Us

Woonsocket, Ri, Us

• Maintaining and tuning CVS's security rules in a multitude of different environments, including Splunk, Google Chronicle, and Crowdstrike• Responding to various security-focused work and tuning requests direct from the SOC, and other members of the team• Building out new environments from the ground up to better facilitate the OCE process, a solid example being our new Siemplify environment to streamline the alert and triage process via the development of Playbooks• Delivering an outcome on all previous mentioned points to better ensure SOC visibility, efficiency, and efficacy and improve their workflow

Tampa, Florida, Us

• Act as SIEM consultant and subject matter expert for new clients • Drive increased visibility and optimization of customer SIEM technologies including Splunk, QRadar, LogRhythm, etc. to evolve their security program. • Install and upgrade platforms to latest stable versions • Manage access policies for systems • Integrate various log sources to increase visibility • Manage log source collection utilizing syslog, Windows forwarding, APIs, etc. • Optimize and normalize logs through filtering, aggregation, and Regex-based parsing • Execute detailed health check reports specifying the status and growth of the systems • Scope and architect security platforms to mature and optimize the environment • Perform new SIEM product support and implementation/deployment • Coordinate and conduct event collection, log management, event management, compliance automation, and identity monitoring activities of SIEM technologies • Work within numerous large and unique customer environments within the Fortune 1000 across many different verticals such as financial, medical, and retail • Communicate engineering value and present engineering findings such as remediation actions, architectural recommendations, etc.

Tampa, Florida, Us

• On April 12th, 2022, I achieved the requirements necessary for promotion from Tier 1 to Tier 1 Senior• This required strong working knowledge in our three major SIEM technologies as well as reaching high level KPI’s over an extended period of time.• At this stage, the expectation is no longer for me to solely focus on my own development, but also to assist in the training and development of the newer engineers. This takes the form of giving presentations, writing in-depth knowledge base articles based on my own R&D, assisting in troubleshooting, tackling deeper issues, etc.

Tampa, Florida, Us

• On February 1st, 2022 I was promoted from Tier 1 Associate to Tier 1. • This was due to meeting certain KPI and performing well in my previous position.• Around this time, I was also moved from my organizational group “Security Group A” to the “Overwatch Team”. This team serves as an escalation point and provides higher level functionality including troubleshooting deeper issues and testing out new alerts before their release into production.

Tampa, Florida, Us

• Triage, troubleshoot, and resolve issues within client SIEM technologies such as Splunk, Qradar, Logrhythm, Exabeam, and the Elastic Stack.• Collaboratively work with my team to solve complicated, long-running issues present within client environments. • Work daily on CentOS and RedHat backend issues that arise from SIEM software issues.• Write new documentation and update existing knowledge base articles to reduce the average MTTR of issues.• Utilize ServiceNow to ensure health tickets are picked up and actioned upon based on criticality and time.• Work closely with Analyst and Content teams to tune existing alarms and custom Regex parsers within client SIEM environments.• Interact with SIEM vendor support to discover, troubleshoot, and resolve issues.

St Petersburg, Florida, Us

Tampa, Fl, Us

Tampa, Florida, Us

Bachelor'S Degree, Cybersecurity

Pre-Requisites For Usf

Education record