Nate Webb Email & Phone Number

As an IT Security Administrator, I have taken a multifaceted approach to enhancing the organization's security posture. I developed and automated Power BI reports to improve auditing capabilities. I spearheaded comprehensive risk assessments and aligned organizational practices with the NIST 800-53 framework, fortifying enterprise-wide risk management and compliance. I designed, deployed, and operationalized a robust Vulnerability Management program, leading engagements across teams to implement patching processes, mitigation techniques, and systemic measures to significantly reduce risk. I also led the deployment of critical security solutions, such as EDR, MSSP, and DLP, as well as analysis sandboxes, bolstering the organization's defense against cyber threats. Additionally, I defined various security policies, audited and improved security configurations and policies across platforms. I enhanced organizational security awareness using KnowBe4 and serve as a primary incident responder.

As an Information Security Analyst, I drove the security architecture framework and implementation within Corning's R&D division. I assisted the division and enterprise in maintaining compliance with various standards, such as NIST 800-171, and export control regulations. To support this, I created approach notes and decision documents to provide strategy and requirements for R&D solutions. Engaging with project members, I ensured the importance of security was understood and strived to provide accessible yet secure solutions. Leveraging relationships from previous roles, I more efficiently aligned with enterprise security strategies within R&D. Protecting intellectual property was a key focus, and I reviewed DLP incidents while improving their effectiveness. I participated in risk assessments and determined mitigations for identified risks.

I engineered new and accurate security alerting capabilities by coalescing various data sources and constructing relevant queries in Splunk. I designed a capabilities matrix to measure skill gaps and promote team growth. To simplify processes, I created interactive dashboards that provided a streamlined interface for cyber investigations. I provided high-quality reports to drive cybersecurity initiatives and demonstrate risk to the organization. I introduced incident response playbooks with clear instructions to improve efficiency and reduce errors during incidents. I served as a lead in phishing and malware analysis, as well as a primary incident responder. I improved Splunk data integrity by ensuring correct field extraction via RegEx and created monitoring reports. I have experience with various security tools like SIEMs, IDS/IPS, EDRs, firewalls, and gateways. I assisted in integrating intelligence sources into Splunk to enhance the overall security posture.