Matthew Parnham Email & Phone Number

California, United States

Irvine, California, United States

Built end-to-end automation framework in Tines to support SOC Incident Response program with processes to normalize data, integrate tools across tech stack to cohesively enrich security incidents (Azure, Sentinel, AWS, GCP, Snowflake, Defender for endpoint and cloud, SentinelOne, ServiceNow, Jira, Confluence, KnowBe4, Virustotal, RiskIQ, AbuseIPDB, etc.).

Irvine, California, United States

Performed incident response as member of the SOC for an environment consisting of E5 AzureAD and M365, user endpoints, cloud applications, and cloud infrastructure in all major CSPs (Azure, AWS, GCP).Triaged and investigated security incidents, performing remediation where necessary (including engaging other teams such as IT for remediation support).Built.

Aid with security operations and incident response for AD users, on-prem machines, and firewall by reading logs, tickets, and alerts and utilizing Azure, Sentinel, MCAS, and Cylance.Develop security automation runbooks in Azure using Powershell to handle scheduled events, compromised AD account hunting and remediation, password resets, malicious IPs, MFA.