Stanley Tabot Email & Phone Number

Triaged and investigated incoming alerts generated from Splunk ES to determine the severity and impact of the event or incidents.Reviewed and collected asset data; indicators of compromise, logs, configurations and running processes, on these systems for further investigation and reporting.Involved in planning and implementing preventative security measures and in building incident response and disaster recovery plans.Investigated, analyzed, and processed retroactive and reported phishing email alerts from IronPort and following standard operating procedures. Use O365 Threat Explorer to analyze, scope and determine the recipients of the phishing emails within the company.Evaluated and processed Web Site Review Requests from internal users to access blocked websites using OSINT tools.Analyze and resolve DLP alerts from McAfee DLP Manager and Splunk Enterprise Security (Splunk ES) and escalate cyber privacy incidents to the Privacy Team.Worked incidents from initial assignment to final resolution.Assist in building SOPs as needed or directed to facilitate SOC operations and processes.Fully documented assigned tickets to show all work performed and attached the required artifacts in order to pass SLRs.Worked incidents from initial assignment to final resolutionPerformed Root Cause Analysis (RCA) and made preventative recommendations for incidents and events.Conducted forensics and investigations as needed using security tools such as CrowdStrike, Splunk, FireEye, Cisco IPS, OSINT, etc.Recognized potential, successful, and unsuccessful intrusion attempts and compromises through reviews and analysis of security toolsCreate, track, and work to resolve Normal and Standard job-related Change RequestsAssisted with the creation of the daily SOC report and Shift reports and pass-down emails to the incoming shift membersParticipated in daily security meetings with team members and customer teams.

Perform remediation actions on Endpoints (laptop/desktop/server) related to cyber securityIncident response case management and automation (SOAR)Incident Response toolsets and specifically phishing group mailbox supportSIEM technologies and utilization within a cyber security environmentCyber Kill Chain/MITRE ATT&CK frameworks and applications within a cyber security command centerLogging/monitoring solutions and implementationsAgile methodology, sprint planning and daily scrum meetingsApply comprehensive knowledge and a thorough understanding of concepts, principles, and technical capabilities to perform varied tasks and projects related to incident responseWorks on complex projects of large scope domestically and internationallyDevelop technical solutions to a wide range of complex problems. Solutions are innovative and consistent with organizational goalsCompletes work independently; receives general guidance on new projects and tasksAct as a mentor to less experienced colleaguesProvide an organized and risk-based approach to remediation of sensitive assets in the enterprisePresent data findings and influence organizational partners at multiple organizational levels.Establish vital reporting metrics to support the program and influence behaviors.Act as liaison with solution owners and IT groups to ensure alignment of our strategy.

Planned and recommended network hardware, systems management software and architectureInstalled/Reimaged, configured and maintained staff computers, file servers, ethernet networks and network cablingMonitored network performance to determine if adjustments were requiredEstablished and developed procedures for proper utilization of IT technologyDeveloped strategies and direction for network systems solutionsImplemented and maintained security strategies for the internal networkEnsured maximum system uptime by performing routine/preventative maintenance tasksRecommended modifications of basic IT systems in order to improve and simplify business systems and reduce operating costHad responsibility for network planning, design, security and optimizationTested new software for bugs before deployment/provisioning

Master, Cybersecurity

Bachelor, It Management