Matthew T. Email & Phone Number

Land O' Lakes, FL, US

Remote, US

Woonsocket, RI, US

• Maintaining and tuning CVS's security rules in a multitude of different environments, including Splunk, Google Chronicle, and Crowdstrike
• Responding to various security-focused work and tuning requests direct from the SOC, and other members of the team
• Building out new environments from the ground up to better facilitate the OCE process, a solid example being our new Siemplify environment to streamline the alert and triage process via the development of Playbooks
• Delivering an outcome on all previous mentioned points to better ensure SOC visibility, efficiency, and efficacy and improve their workflow

Tampa, Florida, US

• Act as SIEM consultant and subject matter expert for new clients
• Drive increased visibility and optimization of customer SIEM technologies including Splunk, QRadar, LogRhythm, etc. to evolve their security program.
• Install and upgrade platforms to latest stable versions
• Manage access policies for systems
• Integrate various log sources to increase visibility
• Manage log source collection utilizing syslog, Windows forwarding, APIs, etc.

Tampa, Florida, US

• On April 12th, 2022, I achieved the requirements necessary for promotion from Tier 1 to Tier 1 Senior
• This required strong working knowledge in our three major SIEM technologies as well as reaching high level KPI’s over an extended period of time.
• At this stage, the expectation is no longer for me to solely focus on my own development, but also to assist in the training and development of the newer engineers. This takes the form of giving presentations, writing.

Tampa, Florida, US

• On February 1st, 2022 I was promoted from Tier 1 Associate to Tier 1.
• This was due to meeting certain KPI and performing well in my previous position.
• Around this time, I was also moved from my organizational group “Security Group A” to the “Overwatch Team”. This team serves as an escalation point and provides higher level functionality including troubleshooting.

Tampa, Florida, US

• Triage, troubleshoot, and resolve issues within client SIEM technologies such as Splunk, Qradar, Logrhythm, Exabeam, and the Elastic Stack.
• Collaboratively work with my team to solve complicated, long-running issues present within client environments.
• Work daily on CentOS and RedHat backend issues that arise from SIEM software issues.
• Write new documentation and update existing knowledge base articles to reduce the average MTTR of issues.
• Utilize ServiceNow to ensure health tickets are picked up and actioned upon based on criticality and time.
• Work closely with Analyst and Content teams to tune existing alarms and custom Regex parsers within client SIEM environments.

St Petersburg, Florida, US

Tampa, FL, US

Tampa, Florida, US

Bachelor'S Degree, Cybersecurity

Pre-Requisites For Usf

Education record