Michael Mills Email & Phone Number

Waxahachie, Tx, Us

Boise, Idaho, Us

· Architected and implemented enterprise-wide threat hunting program, aligning with MITRE ATT&CK framework and standard threat hunting methodologies· Implemented the use of threat intelligence platforms and OSINT capabilities for enhanced hunting operations· Led risk-based vulnerability assessments and remediation prioritization for over300,000 assets · Developed and executed 80+ hypothesis-driven threat hunting campaigns targeting APT groups and emerging threats based on intelligence and vulnerability management findings· Established program hunt cadence, procedures, and documentation standards· Composed detailed threat hunt reporting and actionable remediation recommendations· Authored and disseminated daily strategic threat intelligence briefings reaching 200+ stakeholders, including C-suite executives

Palo Alto, Ca, Us

• Implemented comprehensive onboarding and training programs for new security personnel, ensuring consistent knowledge transfer and operational readiness• Provided strategic oversight and guidance for SIEM alert response and investigation processes, driving resolution and closure of high-priority incidents• Designed and implemented SOC DLP protocols and result categorization • Spearheaded initiatives to streamline cloud service log ingestion into SIEM platforms, enabling comprehensive security monitoring and analysis

Dallas, Tx, Us

• Monitor the SIEM tool and respond to alerts as needed• Create SIEM alarms and tune alerting rules for accurate alerting• Respond to Virus scan alerts, targeted email events and IDS alerts using standard incident response steps• Use industry threat feeds to create and maintain IOC watch list and conduct preliminary threat hunting techniques to search for malicious actors throughout the enterprise • Responsible for the administration and daily operation of various of security tools to include: SIEM, threat sandboxing solutions, Threat intelligence servers and Web proxies• Trained, integrated and mentored new SOC team members • Create, update and organize how-to articles and procedural documentation for the SOC team

New York, Ny, Us

• Identified potential threats, performed analysis and notified the client with remediation recommendations when needed.• Made configuration changes to ASA firewall ACLs when needed• Updated software and signatures on Cisco ASA and IPS devices as required • Performed data aggregation and assembled reports to present to client IT Staff• Made recommendations on tuning client alerts in SecureVue SIEM Tool

• Work as a team lead for a 4 man shift team in a managed security environment• Manually run reports on client IDS/IPS consoles and perform primary analysis of security alerts• Respond to alerts generated by SEIM solutions and investigate when necessary• Perform analysis of packet captures from alert reports using WireShark and vendor specific tools• Create and document operational procedures for SOC shift team to follow