1. Support the delivery of our SIEM and managed security services• Improve the quality and consistency of our response to SIEM incidents2. Work closely with Operations Engineers to ensure timely and accurate response to SIEM incidents3. Review SIEM events and SIRs for accuracy and improvement4. Drive rapid response to customer inquiries and actions associated with SIRs1. SIEM whitelisting2. Firewall configuration / element management (Palo, Fortinet, other…)3. Endpoint protection configuration / management (Cortex XDR / FortiEDR)4. Partner closely with the security engineering team to review / investigate SIEM alerts and SIR response5. SIEM response 1. Threat intelligence tools =GreyNoise/Microsoft Sentinel/SOAR/HIVE2. Response templates3. Documentation and training (onboarding new engineers)4. Provide periodic status updates to clients on the delivery of SOC services• SOC specific updates on SIEM and security managed services• Client QBR that includes a SOC/SIEM update6. Security / Firewall Element Management requests• Support the execution of firewall policy / configuration changes required for SIEM response • Support endpoint protection cases / management requests (Cortex, FortiEDR)• Support other customer firewall Element Management requests as required (support tickets)6. SIEM (Allsight) management• Act as lead for new customer onboarding for SOC/SIEM services• Configuration and management of the SIEM (Allsight platform or others as required)• "On-call Rotation Security Engineer" for critical SIEM event investigation / support

EXPERIENCEDuties and Responsibilities:Network & Security monitoring, change requests and general support related incidents. The Network & Security Operations Center team operates 24x7 and serves as the first point of contact for clients requesting network support via remote and hands-on support for large, complex client networks.• Communicate network monitoring events with customers.• Analyze security threats, write security incident reports and provide recommendations for remediation using SIEM, Kibana & The Hive and all other open-source security tools available.• Assist customers with resolving unplanned technical issues affecting their network and security posture and performance.• Engage network equipment manufacturer support on customer’s behalf when necessary.• Process defective equipment replacements for customers.• Configure and upgrade routers, switches, firewalls, VPNs, wireless infrastructure components, and other products and technologies• Assist customer with general information requests.• Provide a high level of customer service by treating customer requests with appropriate urgency and attention.• Utilize ticketing system for tracking and managing open cases.• Provide network performance summaries and documentation to customers on a periodic basis• Escalate unresolved or SLA sensitive issues to senior engineers• Triage and collect appropriate data for escalated issues• On occasion, dispatch to replace hardware failures for local accounts.

• Monitor all corporate and customer network resources throughout the Access, Distribution and Core layers on Cbeyond’s network all the way to the LEC.• Troubleshoot and repair Cisco ISR 2900s, ASR 9000, 7200, 7300, 7600, TAR 10k, and CAR 10k routers and switches.• Troubleshoot EFM Actellis ML2000• Troubleshoot and repair BTI 7060 fiber switched networks. • Troubleshoot and repair Linux/Unix/Sun based servers for process failure, and storage management. • Troubleshoot and repair Broadsoft and NetSIP based voice networks, both class 4 and class 5• Troubleshoot Least Cost Routing with Kamailio (OpenSIPS/OpenSER)• Find deficiencies related to network monitoring, using Tivoli Netcool.• Troubleshoot VMWare and HyperV production environments; work directly with the fix agents. • Manage conference bridge with LECs for the purpose of troubleshooting and communicating outages for all platforms on Cbeyond’s network.

Configure, support and installation of Cisco Wireless Access Points. Network monitoring of Nordic's infrasturcture, local desktop support, administration of accounts, remote network and technical support of Nordic's 14 cold storage warehouses in a 4 state region. Local and remote support of all RF devices, both Psion and LXE, handhelds and truck mounts that run off Nordic's wireless infrastucture using SOTI Mobile device software.

McKesson provides services and products to health care providers and payors. From pharmaceuticals and medical supplies to sophisticated medical hospital workflow solutions, McKesson supports customers reducing costs, streamline processes and, improve patient care and medication safety.Duties and Responsibilities: Responsible for operations of a company's internal data communications systems, including LANs and WANs.Implemented McKesson's network systems, including configurations supporting and troubleshooting network problems.Coordinated with vendors for installation of such items as routers, bridges, concentrators, and switches; project implementation; providing training and assisting with proposal writing. Monitored network using Cisco Works, Solar Winds, Smarts, Statseeker,Netcool, Orion and Sirus.Perform break/fix activities for all aspects of the Level3 network and the services that ride the network.Technologies Used: TCP/IP, LAN/WAN 10/100/1000, VLAN/Trunking, ATM, Frame-Relay, DNS, DHCP, BGP, EIGRP, OSPF.

NACR provides comprehensive services support, with the team, expertise, technology, and tools in place to deliver everything from solution design to in-field implementation and after-market services, consultation, refurbish and parts repair.Duties and Responsibilities:Supported staff with technical support of desktop and laptop computers, applications, and related technology. Support includes specification, installation and testing of computers systems and peripherals within established standards and guidelines.Participated in multiple large Cisco VOIP network installations involving Cisco 7960, 7609 and 7000 model phones. Support of Cisco 6500 routing switch.The position's responsibilities require independent analysis, communication and problem solving.Worked with Help Desk and Network Operations staff as appropriate to determine andresolve problems related to network connectivity issues received from clientsTechnologies Used: VOIP, QOS, PBX, DNS, DHCP, TCP/IP, LAN/WAN 10/100/1000, VLAN/Trunking, VPN, PPP, PRI, SIP and Frame Relay.

Sprint Nextel offers a comprehensive range of wireless and wireline communications services bringing the freedom of mobility to consumers, businesses and government users.Duties and Responsibilities:Provide technical support functions for the LAN and WAN including the management of Cisco Hubs, Cisco Switches models 1900, 2500 and 2506, Cisco Routers model 7500, firewalls and Cisco CSM load balancing devices.Managed performance tuning and capacity planning activities to enhance the performance of the network resources.Analysis of network performance issues using Solar Winds, Cisco Nam, Cisco Works and HP Open View and Netcool.Coordinated local Telco's and external vendors to troubleshoot circuits and resolve issues affecting network connectivity.Worked with team members to provision circuits for WAN network.Technologies Used: TCP/IP, LAN/WAN 10/100/1000, NAT, VLAN/Trunking, ATM, Frame-Relay, MPLS, H323, FTP, DNS, DHCP, BGP, IGRP, EIRGP, RIP, OSPF, VPN, ISDN, SNMP, VTP, T1, DS3, Unicast, Multicast and STP.

Bellsouth provides innovative, reliable, high-quality products and services and excellent customer care recognized as one of the leading worldwide providers of IP-based communications services to businesses.Duties and Responsibilities:Dedicated internal desktop support to Bellsouth's Big and Small business entities. Image and reimage all Dell, Compaq and Dell computers.Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups. Rotated Server backup responsibility and provided 24/7 on call support.Repair and recover from hardware or software failures. Coordinate and communicate with impacted constituencies.Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary.Create, change, and delete user accounts per request.Technologies Used: TCP/IP, DNS, DHCP, Active Directory and Exchange.

Bellsouth provides innovative, reliable, high-quality products and services and excellent customer care recognized as one of the leading worldwide providers of IP-based communications services to businesses. Duties and Responsibilities:Provided Tier I and Tier II support to 3,000 users in a four-state region.Performed installation and troubleshooting of all BAPCO proprietary applications.Supported network connectivity, software and hardware issues.Maintained a 600 laptop inventory including imaging and software testing for any connectivity issues.Password resets and email configuration support using Active Directory.Technologies Used: DNS, DHCP, Active Directory, Exchange management, TCP/IP.

Bellsouth provides innovative, reliable, high-quality products and services and excellent customer care recognized as one of the leading worldwide providers of IP-based communications services to businesses. Duties and Responsibilities:Compiled layout of ads on pages utilizing complex page layout applicationPerformed final proofing of pages to ensure strict compliance with ad placement specifications and ethics standardsInterfaced with Sales and Management to facilitate last-minute additions, deletions and changes to advertising affecting page layoutsCompiled data for daily statistical reports regarding end of the day status for backlogs, pages shipped and next day priority workRelieved for unit Coach on a regular basis