Ronald Botts Email & Phone Number

Houston, Texas, Us

Configure and oversee monthly automated vulnerability scans of ~8000 devices withRapid7 InsightVM. Use results to identify attack surface of worldwide business network.Whitelist and blacklist domains with Cisco Umbrella based on user requests. Blacklist malicious IP addresses with Cisco Firepower.Blacklist malicious email addresses and domains in Cisco Ironport.Design policies in CyberArk EPM to prevent malicious software from running, or to giveadmin access to users for simple tasks such as changing their clocks and adding printers.Administrate and update Splunk instance for entire enterprise, created internal Splunkapp consisting of relevant dashboards and search queries. Generate non-securityrelated alerts, reports, and dashboards for company business groups that request them.Investigate malware events originating from company SentinelOne console, as well asusing their deep visibility search tool to aid in security events that occur. Orchestrate test phishing email campaigns in KnowBe4 to send to entire company toincrease phishing email awareness, using results to identify users susceptible tophishing.Use Mandiant Redline to gather forensic data from devices involved in security events.

Houston, Tx, Us

Currently working on my GSEC certification.Comply with NIST 800-171 policies for all job activities as required.Monitor network logins, file transfers, web traffic and website visits of users to prevent hostile activity using Splunk, Websense and Cybergauge.Point of contact for hard drive forensics done via EnCase, still developing skillset.Craft searches, alerts and reports with Splunk to analyze numerous sources of data to find causes, events and cases of anomalous, suspicious or malicious activity.Investigate malware and malicious emails with FireEye to observe code executions for software installations, registry modifications, process start ups and network callbacks.Most alerts caused in FireEye are due to emails with malicious attachments, files with abnormal or malicious code attempting to run, and websites with malicious code or redirections. Proactively observe approximately 4000 employees email accounts and web traffic for any data loss prevention opportunities using Websense.Types of data loss being looked for include passwords, PII, proprietary company data as well as sensitive data being sent to personal or non-KBRwyle email accounts.Investigate and lockdown any network intrusions if cause or origin can be identified; use investigation data from attacks prevent future occurrences and to look for causes in future intrusions.Review results of Nexpose analysis to get a score and determine what software or operating systems needs patching, or uninstalling on approximately 3000 computer assets and 200 servers.Use Nexpose evidence to recommend service desk and data center teams which desktops, laptops, and servers to patch immediately to have the greatest impact reducing the number of attack vectors.Capture first responder triage data from machines locally or remotely via FireEye HX or Mandiant Redline. Investigate data to determine if the asset needs to be re-imaged, if file needs to be removed or if data is a false positive.

Houston, Tx, Us

Effectively use technical knowledge to clearly resolve and explain solutions to users via phone, email or in person.Plan requirements, processes, strategies and practices in order to support asset and software life-cycles, as well as manage customers on new network domain.Manage hardware and software configuration of Windows 7 image in Symantec Altiris, adding and removing components to configuration as needed per user.Building virtual machines in vSphere and configuring the VMs to work via a Wyse P20 terminal, cutting need of ~120 physical computer assets.Customize Wyse P20 terminal profiles in teradici to accept usb devices such as card readers for email encryption and military site access.Remote support users machines using dameware/RDP/pcAnywhere.Motivate and engage team to complete the highest number of requests each month as well as giving quality customer service.Alter group access permissions in active directory based on approved or denied requests.Release blocked email attachments for customers from exchange server quarantine.Assisted phone roll out to Cisco VOIP phones and domain migrations at Lexington Park, MD, Aberdeen, MD and Burlington, MA locations.Track and centralize hardware asset life-cycles, software purchases and licenses using Microsoft Sharepoint.

Houston, Texas, Us

Addison, Texas, Us

Use Avaya phones to receive, diagnose and ultimately remedy over 7,000 colleagues and 40,000 customers Windows XP, Citrix, Lotus Notes application issues.Connect remotely to user machines using VNC or RDP to configure HP LaserJet 2015, 2035, 4015, 4250, 4350 network or local printers and Lotus Notes databases.Reset passwords for users that are unable to log into any software systems such as Windows XP, Citrix, Safeboot and Lotus Notes.Administrate, monitor, reset and troubleshoot applications and servers for users running Citrix, with the AMC45 software.

Bachelor Of Arts (B.A.), Arts And Technology

High School, High School