Michael R. Email & Phone Number

Sydney, New South Wales, Australia

• Engineering/Architecture - Architected and Implemented an elastically scaled 6-figure EPS Syslog Ingestion System (SIS) for Microsoft Sentinel - Elastically-scaled SIS implemented the following products: - Logstash (plugins: tcp, udp, syslog, kafka, dns, grok, MS Sentinel) - Kafka-based Products (Apache Kafka, Confluent, Azure Event Hub) - Azure Private Link Scopes + Subservices - Network Load Balancers (Azure LB, Kemp LM, F5 LTM) - Virtual Machine Scale Sets - Custom Data Collection Endpoints - Custom Data Collection Rules (Parsing, Transformation, Tables) - Rsyslog (plugins: imudp/imtcp, omkafka) - Scale-in/Scale-out policies - Rewrote specific Logstash-based Microsoft plugin functions to increase compression - Designed, tested, and implemented several new DCRs to support new or under-supported data sources. - Most complex SIS was projected to scale to 6-figure EPS. - SIS implemented full security protocols including encryption, authentication, and AV/EDR capabilities

Fredericton, New Brunswick, Canada

• SIEM Management - Evaluated/Integrated Load Balancing/High Availability (HA/LB) for distributed syslog processing - Built 3rd Party Health Checks between Syslog Nodes and HA/LB Nodes. - Rule Creation, Modification, and Tuning. Design and Implementation - Syslog Collector Management (Linux) - Collaborative/Team Effort (CAB Approval)• Systems Administration - ISO Customization and Templating (RHEL + Kickstart) - Custom Service Control/Design/Maintenance - Firewall Configuration - Hardening - EDR/Antivirus - Syslog + Regex - Integrated the ELK Stack with Microsoft Sentinel for [unsupported] 3rd Party Log Sources• Technical Health Management (Zabbix) - Designed & implemented a full HA Health Management System in a 2-tiered application setup - Designed & implemented the vertical and horizontal scaling of the processing nodes - Implemented HA and horizontal scaling (automatic) within Azure DB for MySQL - Designed, implemented, & maintaining: custom items, discovery, LLDs, prototypes, and triggers - Designed & implemented scripts for semi-automated remediation of health incidents - Implemented standard communication encryption (Server <-> Client, Web Front End)• Firewall/Switch Management (Fortinet) - All modes (NAT, Transparent, OAS) - VLAN/Subnet Management - ACL + UTM Management - VPN Management - Managed Switches - Certificate Management - Firmware Management - Introductory knowledge of: SonicWall, Watchguard, Cisco ASA• Digital Forensics / Incident Response - Email Investigation - Identity Compromise - Endpoint Compromise (Linux/Windows) - Server Compromise (Linux/Windows) - Small, Medium and Large-Scale Response• Vulnerability Assessments / Penetration Tests (SOC Lead) - Tenable.io and Nessus Professional - TVM Integration into SIEM platforms - Trainer for Security Analysts• On Call Rotations

Fredericton, New Brunswick

Daily Tasks Include:- SIEM Monitoring / Threat Triage & Response.- Threat Hunting- Documentation of active projects or proceduresOther Tasks- Assistant to DFIR cases (File/Script Analysis, Auditing Logs) - As assigned by Management.- Vulnerability Assessments (VA) & Pentests- Special Projects (Extending SIEM & VA Abilities)- Light SIEM Management (Reference Set Management, Designing or Improving Custom Rules for SIEM SME to implement)

Fredericton, New Brunswick

- Create, maintain and update log books regarding all relevant information for the night.- Report any vehicle problems, safety hazards or notable events immediately to my superior.- Work collaboratively with other drivers, ensuring that breaks, driver shortages or vehicle breakdowns do not affect the quality of service.- Train new SafeRide drivers.- Maintain a clean driving history. (tickets, accidents)

Fredericton, New Brunswick

- Create and maintain all relevant curriculum for accuracy, while being attentive to details.- Prepare accurate lessons for learners.- Maintain and update all relevant information on social media platforms, including our website.- Contact learners as necessary to remind them of upcoming appointments.- Contact potential learners to answer any questions they may have, and if possible arrange a booking.- Work collaboratively with coworkers.- Manage, Update and Maintain the DigiLearn website (SquareSpace).

Fredericton, New Brunswick

- Setup client domains, on a wide range of hosting companies.- Manage associated GSuite DNS Records.- Implement security standards based on client needs.- Maintain all domains under our GSuite Reseller Platform.- Manage company's associated users and their accounts.- Obtain necessary GSuite Reseller Qualifications.*GSuite Qualification is in the name of my boss; Sally Ng. (See below for credential at Coursera.org)