Pedro Borges Email & Phone Number

Plano, Texas, Us

* Architected and implemented the Splunk Enterprise Security (ES) deployment. This included right-sizing the environment to meet the additional search and indexing load, configuring access control, implementing the Assets and Identities framework using data from multiple sources, and following best practices.* Created a detection as code pipeline to enable the SOC team to keep security detections in our code repository and deploy them to the environment in a controlled, consistent and automated way.* Implemented detections from publicly available Sigma rules and Splunk’s Enterprise Security Content Updates (ESCU) as well as created custom detections. Performed detection tuning based on SOC analyst feedback.* Automated processes such as patching the systems in the Splunk environments, and created a CI/CD pipeline for pushing Ansible code to the various Splunk environments.* Onboarded data from numerous sources, such as infrastructure data from cloud vendors such as Azure and GCP, EDR, static code analysis tools and others. This included transforming and reducing data using Cribl.* Evaluated and implemented best practices in distributed Splunk Enterprise deployment. Created architecture design diagram, documented architecture, data catalog and administration processes.

Walldorf, Bw, De

* Managed and led the Global SIEM Design team.* Managed internal customer relationships, defining and clarifying design requirements, leading team (and contributing) to implementation.

Walldorf, Bw, De

* Updated SIEM architecture to further enhance high availability of log collection, retention and analysis.* Worked with multiple teams to ensure audit logs from the required sources were being collected in the SIEM. This includes sources such as WAF, internal SAP Concur services, privileged identity management software, among others.* Built automation to integrate Splunk SIEM with S3-compatible storage* Built automation to support vulnerability management processes, to perform automated patching of SIEM and vulnerability scanning systems* Supported and maintained multiple SIEM environments across various geographic locations

Walldorf, Bw, De

Deployed, configured, and maintained the installation of Splunk Enterprise in the ConcurGov environment. Developed Ansible playbooks to assist with the deployment, configuration, and maintenance of the Splunk Enterprise installation. Worked with other engineering teams to onboard data onto the SIEM in order to gain visibility into the environment and assist with security monitoring and investigations.Established the network and database vulnerability scanning and reporting processes. Developed automation for scan engine deployment, scan report generation, and ticket creation. Trained security operations center (SOC) personnel in the vulnerability management process. Partnered with Risk to properly report, assess, and manage risks posed by system and network vulnerabilities.Performed architecture risk assessments, organized and led weekly meetings as part of the Security Architecture Review Board (SARB).Improved process around onboarding web properties and protecting them with the web application firewall (WAF).Participated in the on-call rotation for the Security Operations team. Assisted in security investigations, collaborating with security as well as service management teams to resolve security incidents.Created and documented processes for security reviews, including network changes and credential requests. Developed and improved internal team processes and documentation.

Bellevue, Wa, Us

Deployed, configured, and maintained the installation of Splunk Enterprise in the ConcurGov environment. Developed Ansible playbooks to assist with the deployment, configuration, and maintenance of the Splunk Enterprise installation. Worked with other engineering teams to onboard data onto the SIEM in order to gain visibility into the environment and assist with security monitoring and investigations.Established the network and database vulnerability scanning and reporting processes. Developed automation for scan engine deployment, scan report generation, and ticket creation. Trained security operations center (SOC) personnel in the vulnerability management process. Partnered with Risk to properly report, assess, and manage risks posed by system and network vulnerabilities.Performed architecture risk assessments, organized and led weekly meetings as part of the Security Architecture Review Board (SARB).Improved process around onboarding web properties and protecting them with the web application firewall (WAF).Participated in the on-call rotation for the Security Operations team. Assisted in security investigations, collaborating with security as well as service management teams to resolve security incidents.Created and documented processes for security reviews, including network changes and credential requests. Developed and improved internal team processes and documentation.Updated the Plans of Action and Milestones (POA&M) for various environments as part of FISMA certifications.

Arlington, Va, Us

Assisted cloud service providers (Office 365, Azure) in updating their System Security Plan (SSP): - Scheduled and carried out interviews with various teams to ensure the security controls had appropriate and up-to-date responses. Reviewed security controls and their implementation for the SSP. - Performed gap analysis and requirements gathering for dataflows within the system, and updated the dataflow diagram. - Provided support during FedRAMP audits.Assisted the Office 365 compliance team with the asset management remediation program: - Tracked project status, kept the project plan up-to-date, ensured the team stayed on schedule, and coordinated/led meetings.Assisted Office 365 risk team with the risk management program: - Gathered requirements and designed initial UI of a workflow tool to handle problem tickets. - Wrote/updated white papers in support of risk management program. - Updated the existing risk register and provided assistance with risk assessments.

Arlington, Va, Us

- Provided ALERT software training for information system security officers and maintainers. - Performed system hardening for servers in the environment. - Executed and analyzed system security scans (WASSP and SECSCN) for Windows, Red Hat and Solaris systems. - Developed, tested, assisted with the integration of Portable Hardening Toolkit (PHT) version 6.2.4 for Windows, UNIX (Red Hat, SuSE, Solaris and IRIX) and SecureOS. - Developed and tested new features for the ALERT log collection and reduction tool. - Assisted with the migration of a log audit tool (client and server packages) from Solaris to Linux. - Performed Windows 7 and Windows 2008 R2 auditing and recommended fixes to improve security posture of systems based on findings.

Petaling Jaya, Selangor, My

I worked as an English teacher at UCSI Vietnam for five months. I also assisted with the school's database system and helped create data entry forms using Microsoft Access 2007 to carry out tasks such as enrolling new students.

Azusa, Ca, Us

I joined TeachOverseas for one year. I got certified as an ESL teacher and taught English in Da Nang, Vietnam at the VMG English center.

Arlington, Va, Us

- Implemented fixes and new features for the ALERT software. Assisted with system integration, system hardening and testing. - Implemented fixes and new features for the Human Review Manager (HRM) document review software. - Implemented fixes and new features for the RShield software. - Performed vulnerability assessment of NOAA sites, utilizing vulnerability scanning tools. Reported discovered vulnerabilities and recommended actions.

Arlington, Va, Us

- Developed the ALERT log-collecting client and server-side software for Windows and UNIX (Red Hat and AIX).- Performed functional and integration verification testing for the ALERT software and assisted with system integration and testing.- Worked with users to improve functionality and usability of the ALERT software.- Implemented fixes for, and tested the ALERT Java-based graphical user interface software for searching and parsing audit logs.

Mclean, Va, Us

I worked at Freddie Mac as a summer intern in 2006.Designed and developed scripts using IBM Rational Functional Tester to test internal software functionality. Assisted with performance testing of internal software.

Armonk, New York, Ny, Us

I worked as a co-op at IBM in 2005.Performed various types of testing for IBM WebSphere Commerce, IBM WebSphere Everyplace Access and IBM WebSphere Everyplace Deployment.Wrote and executed test plans/test cases, generated defect reports, and assisted with problem resolution.