Work with client to implement Managed Security Services into the existing security infrastructure, and integrate this into their threat analysis, incident response, and future service implementations. Assess security processes for improvements and educate on compliance needs and best practices. Consult on PCI, NIST Framework, and GDPR.

Manage and analyze alerts from Symantec DLP system during an interim period prior to client's acquisition. Conduct analysis to assess severity and incident response to DLP findings. Needs assessment for new alerts and alert tuning. Educate security teams on DLP best practices.

+ Work as a Security Operations Center (SOC) Analyst and monitor network logs, server and workstation logs, network traffic, and other log sources for security-related alerts, events, and potential incidents.+ Installed and configured a FortiMail email security gateway (aka spam firewall).+ Analyzed unidentified logs in the LogRhythm SIEM to generate log source types and log correlation rules as needed+ Monitor the security group mailbox for US-CERT alerts and other notifications. Complete routine and daily monitoring reports to upper leadership and external entities, including US-CERT. + Monitor Cybersecurity threat portals for threat data, trends, and Indicators of Compromise (IOCs).+ Set/Configure/Scripting/Use LogRhythm and other advanced tools to process large sets of data and correlate events and alerts.+ Perform event categorization, initial incident response, issue resolution, and communications of security risks to the enterprise.+ Lead security incident triage, investigations, and initial response and resolution, reporting Information Security Manager to support incident analysis and resolution. Initiate reach back for deeper network and host forensics and support malware analysis, as needed.+ Provide the security training from the operation perspective based on the lessons learned from prior security incidents and investigations + Perform periodical security scanning and internal security testing to identify the potential security breach in the working environment

Perimeter security, Web Proxy maintenance/admin, endpoint protection, vulnerability scanning

Maintenance, monitoring, and customer support of the managed security solutions provided by Trustwave.

Network & Systems administration, I.T. Security, PC and Server support, and even some production support of CCTV/IR Cameras utilized in NSSC Solutions.

Customer support of US Cellular data products (Smartphones, USB cellular data modems), special projects