• Became knowledgeable in multiple SIEM and EDR technologies to analyze and respond to active customer threats. These technologies include Splunk Enterprise Security, QRadar, ArcSight, LogRhythm, McAfee ESM, Carbon Black Response, Carbon Black Defense, Carbon Black Threat Hunter, CrowdStrike Falcon Endpoint Protection, McAfee ePO, Cisco FirePower, Lansweeper, DarkTrace, BlueCat and more. • Monitoring customers' network environments via SIEM technologies for IDS/IPS systems, Firewalls, Windows/Linux Servers, Routers, Switches, EDR tools, endpoint-level logs, etc. • Continued learning and awareness of emerging threats in cybersecurity, along with frequent utilization of OSINT resources and sandboxing tools to better understand on-going issues as well as to better identify false positives • Familiarity with a wide range of log sources including Palo Alto Networks, Juniper Networks, Windows Events, BlueCoat, Cisco ASA, Symantec EPO, McAfee EPO, CrowdStrike, Carbon Black, ProofPoint and more. • Consulted with various fortune 500 company’s internal security teams on a daily basis for high and critical severity alerts, to convey analysis on threats in their environments as well as give recommendations on remediation steps.

·Achieved MFA authentication on production servers·Implemented smart key logins (Yubikey) to prevent network intrusions·Deployed an IPsec VPN for providers to access network resources offsite·Managed 100+ employees computer needs including 17 providers·Trained employees on a multi-million-dollar EMR system (CERNER)·Zero security breaches allowed including phishing, trojan and virus attacks·Grew familiar with installing, updating and security hardening windows and Linux servers.

·Learned more about security threats that attack businesses·Monitored security alerts through security onion (Linux) ·Created custom alerts using regular expressions to mitigate risk