Lead and perform SIEM content development including use case creation, dashboard design, minimize false positives, development of reporting metrics including SLAs and KPIs, and log source configuration. Participate in use case development, provide technical design inputs, and maintain SIEM use cases throughout their lifecycle including SOAR integration and playbook creation.Work with customers to incorporate asset landscape details, severity threats campaigns, and data breaches, as well as perform impact and exposure assessments. Threat hunting, independent threat research, mentor, and support SOC Analysts Tier 1-3.Leverage advanced knowledge of security operations, cyber security tools, intrusion detection, and secured networks to integrate the SIEM platform. Act as an escalation point for the Security Analysts to assist and advice on the most complex security threat investigations. Collaborate with Senior ASOC Analysts and on-site teams to implement SIEM & SOAR platform solutions.Provide expert advice on SIEM management, infrastructure, log ingestion, and normalization in order to support the ongoing development of use cases and their dependencies. Review and enhance logging information flow strategies and technical information required for log onboarding for technical analysis, intrusion detection, and performance metrics.Develop and implement SIEM, SOAR, and service management integrations including threat intelligence feeds, authentication systems, and response systems (firewalls, proxies, etc.). Perform SIEM installation, configuration, management, security updates, and fault-finding.Provide briefings to ASOC managers, customer service leads, and other stakeholders on issues pertaining to SIEMS management, use case maintenance, and operational risks, and mitigation plans. Consult vendors and customers on implementing sound and secure logging practices while interfacing with customers in support of their logging requirements.

Responsible for solutions within the organization with advanced proficiencies in large scale data processing, architecture, building and maintaining large-scale data pipelines, web and automation programming, writing and consuming APIs (Application Programming Interfaces), geospatial analytics, and data visualization.Responsible for the development of technical solutions required to detect anomalous activities and malicious patterns in Verizon application data, customer activity, external intelligence, and other behavioral data sets to identify, mitigate, and validate impacting Verizon personnel and customers.Developed and implemented Splunk Enterprise application for monitoring of internal and external threats supporting use cases within the corporate security organization. The solutions include automation of workflows and processing of over 100 million records of data per day.Automated data pipelines for several use cases into Splunk that helped identify fraud and application abuse which led to mitigation of over 400 employees and mitigated over 50 million dollars in fraud loss avoidance.

Led No-Access Dispatch reduction project which produced over 2 million dollars in savings yearlyLed a BPON to GPON migration project which launched upgrade of Verizon’s ONT devices, saving thousands of repair hours and over 10 million dollars in repair cost avoidance.Developed a network operational Splunk dashboards for NOC (Network Operation Center) teams to monitor networks and be proactive, reducing repair calls by 15% and cost savings of over 5 million dollars yearly

Assisted Verizon residential and small business customers with over the phone support for service issues.Coached new hires and fellow associates on best practices to help achieve their performance metricsLed the LTS (Lead To Succeed) program, generating additional revenue from existing customers by upgrading their services, adding an additional 2 million dollars in revenue growth yearly

As a helpdesk tech my job was to troubleshoot customer tickets involving desktops, printers, cables, software, hardware, and other onsite or offsite users and network issuesExperienced with Symantec, Desktop Authority, SolarWinds, VMware, and other company and third-party software. Working with Active Directory, Backup servers, VMware, SANs, and applications for the company.Company liaison for new hire training on IT rules and regulations policySaved company over 10 thousand dollars by finding third party vendor for older IT equipment green disposal