Steve Hergert Email & Phone Number

Cleveland, OH, US

Independence, Ohio, US

Roseville, California, US

• Implemented MFA and login alert rules to protect against authentication attacks.
• Configured strict DMARC, DKIM, and SPF to enhance email security and prevent spoofed sending.
• Validated protection against Log4Shell vulnerability using custom crafted JNDI payloads.
• Spearheaded web redesign initiative; set up Drupal 7 CMS instance on Pantheon cloud infrastructure.
• Set up Cloudflare CDN to deliver cached data more efficiently and protect against malicious web activity.
• Enforced HTTPS with PHP and Cloudflare to deliver all data transmissions securely using SSL.

Claremont, CA, US

• Maintain and configure Workday Integration to ensure account synchronization with PeopleSoft.
• Create and maintain Workday reports for HR, Payroll, and OIT.
• LastPass support and administration, troubleshooting user account recovery with super admin account.

Claremont, CA, US

• Administered security updates, patches, and maintenance on Production and Development instances.
• Researched and assisted in LastPass implementation for more secure password management.
• Assisted with implementation and testing of Duo Security for Workday HCM and timeclock system.
• Trained essential personnel in setup and usage of U2F hardware keys to enhance Multi-Factor Authentication security.
• User provisioning and quarterly security audit for PeopleSoft account changes.
• Create and manage reporting processes for HR and Payroll using Workday HCM.

New York, NY, US

• Spearheaded technical procedures for implementing Proofpoint Email DLP pilot program and roll-out.
• Co-administered Splunk Enterprise from Red Hat Enterprise Linux backend on 15+ servers.
• Created and maintained Splunk SOAR alerts and Flashpoint threat intelligence alerts.
• Responded to on-call incidents and alerts using Splunk, ExtraHop, and CrowdStrike Falcon.
• Enhanced cyber deception approach, utilizing Canary hosts and honey tokens to detect malicious activity.
• Maintained web traffic firewall rules with Palo Alto Networks Panorama and Akamai WAF.

Cleveland, OH, US

• Investigated Splunk alerts and FortiGate firewall logs to defend the University network and systems from malware threats.
• Coordinated threat intelligence with REN-ISAC and Northeast Ohio Cyber Consortium (NEOCC) using their threat intelligence platform, TruStar, to share and present threats, tactics, and procedures observed from threat.
• Primary administrator for LastPass; primary content manager for the Information Security Office blog.
• Assisted with planning, setup, testing, and deployment for new FortiClient Endpoint Management Server rollout.
• Maintained AWS instances via Ansible automation to manage TheHive Project, Cortex, and BookStack.
• Earned GIAC Web Application Penetration Tester (GWAPT) and completed corresponding SANS SEC542 course.

Cleveland, OH, US

• Worked with the Information Security Office to protect the University from cyber threats.
• Performed on-site network security monitoring and risk assessment during the first 2020 Presidential Debate.
• Collaborated with the Cleveland Clinic, the Commission on Presidential Debates, and federal cyber and physical security teams to run through threat scenarios, tabletop exercises, and incident handling procedures in.
• Utilized Cisco Umbrella, Google Chronicle, and Volexity to monitor for suspicious network traffic.
• Analyzed and provided context for threat intelligence shared with the Homeland Security Information Network.
• Performed vulnerability assessments on CWRU assets using Qualys and OpenVAS on Kali Linux.

• Management of eleven servers (eight CentOS and three Debian, supporting LAMP stacks) on Google Cloud’s Compute Engine to successfully deliver an average of 1.5 million page views per month.
• CentOS and Debian scripting for file and database backup, executed once a day via cron automation.
• Firewall security enhancement by initiating and auditing a port scan of open ports on development and production server machines, closing unnecessary ports to the public while retaining internal accessibility.
• Traceroute utilization among other network utilities to reveal access point that was under-delivering.
• Site setup and content migration from over forty-five TeamSite instances to multi-site Drupal instances.
• Consistent 100% customer satisfaction rating from the Zendesk ticketing system.

• Web development using PHP, HTML, CSS, and jQuery with the MVC framework.
• Database management using Microsoft SQL.
• Management of Continuing Education using the Moodle content management system.
• Workstation installation.

Cleveland, OH, US

• Internal website migration from static HTML to WordPress format.
• Migrated over thirty code projects from Polytron Version Control System to GitLab repositories.
• Initialized and configured an IPv6 subnet scanner on an Ubuntu virtual machine to monitor Neighbor Discovery Protocol traffic with NDPMon. Set up a web interface to display the results from a browser window.

Yucaipa, CA, US

• Group leader, assisted students with algorithm, binary, and encryption exercises.
• Aided in teaching students Android programming and Alice programming through hands-on projects and paired programming.
• Provided setup assistance and troubleshooting for Android phones and tablets.

• Computer maintenance and RAM upgrades
• Printer troubleshooting
• Network implementation and security enhancement using WPA2-PSK with AES encryption
• Fixed network downtime within an hour by troubleshooting a MAC address conflict between the router and the ISP.

Bachelor Of Science (Bs), Computer Science

Associate Of Science (As), Computer Science