Steve Hergert Email & Phone Number

Cleveland, Oh, Us

Cleveland, Oh, Us

Independence, Ohio, Us

Roseville, California, Us

• Implemented MFA and login alert rules to protect against authentication attacks.• Configured strict DMARC, DKIM, and SPF to enhance email security and prevent spoofed sending.• Validated protection against Log4Shell vulnerability using custom crafted JNDI payloads.• Spearheaded web redesign initiative; set up Drupal 7 CMS instance on Pantheon cloud infrastructure.• Set up Cloudflare CDN to deliver cached data more efficiently and protect against malicious web activity.• Enforced HTTPS with PHP and Cloudflare to deliver all data transmissions securely using SSL.• Designed information architecture to optimize performance, improve user experience, and utilize best practices for Search Engine Optimization.

Claremont, Ca, Us

• Maintain and configure Workday Integration to ensure account synchronization with PeopleSoft.• Create and maintain Workday reports for HR, Payroll, and OIT.• LastPass support and administration, troubleshooting user account recovery with super admin account.

Claremont, Ca, Us

• Administered security updates, patches, and maintenance on Production and Development instances.• Researched and assisted in LastPass implementation for more secure password management.• Assisted with implementation and testing of Duo Security for Workday HCM and timeclock system. • Trained essential personnel in setup and usage of U2F hardware keys to enhance Multi-Factor Authentication security.• User provisioning and quarterly security audit for PeopleSoft account changes. • Create and manage reporting processes for HR and Payroll using Workday HCM.• Wrote Windows PowerShell scripts to automate file encryption and SFTP transfer between systems.• Assisted in applying renewed SSL certificate for Production and Development PeopleSoft instances.• Implemented Enrollment Financial Agreement process in PeopleSoft.

New York, Ny, Us

• Spearheaded technical procedures for implementing Proofpoint Email DLP pilot program and roll-out.• Co-administered Splunk Enterprise from Red Hat Enterprise Linux backend on 15+ servers.• Created and maintained Splunk SOAR alerts and Flashpoint threat intelligence alerts.• Responded to on-call incidents and alerts using Splunk, ExtraHop, and CrowdStrike Falcon.• Enhanced cyber deception approach, utilizing Canary hosts and honey tokens to detect malicious activity.• Maintained web traffic firewall rules with Palo Alto Networks Panorama and Akamai WAF.• Administered and maintained Data Loss Prevention configuration using Proofpoint DLP.• Validated system protection against Log4Shell vulnerability, using Canarytokens and custom craftedPython scripts to deliver JNDI payloads (user agent strings, username values, password values, etc).

Cleveland, Oh, Us

• Investigated Splunk alerts and FortiGate firewall logs to defend the University network and systems from malware threats.• Coordinated threat intelligence with REN-ISAC and Northeast Ohio Cyber Consortium (NEOCC) using their threat intelligence platform, TruStar, to share and present threats, tactics, and procedures observed from threat actors.• Primary administrator for LastPass; primary content manager for the Information Security Office blog.• Assisted with planning, setup, testing, and deployment for new FortiClient Endpoint Management Server rollout.• Maintained AWS instances via Ansible automation to manage TheHive Project, Cortex, and BookStack.• Earned GIAC Web Application Penetration Tester (GWAPT) and completed corresponding SANS SEC542 course.

Cleveland, Oh, Us

• Worked with the Information Security Office to protect the University from cyber threats.• Performed on-site network security monitoring and risk assessment during the first 2020 Presidential Debate.• Collaborated with the Cleveland Clinic, the Commission on Presidential Debates, and federal cyber and physical security teams to run through threat scenarios, tabletop exercises, and incident handling procedures in preparation for the first 2020 Presidential Debate.• Utilized Cisco Umbrella, Google Chronicle, and Volexity to monitor for suspicious network traffic.• Analyzed and provided context for threat intelligence shared with the Homeland Security Information Network.• Performed vulnerability assessments on CWRU assets using Qualys and OpenVAS on Kali Linux.• Earned GIAC Security Essentials Certification (GSEC) and completed corresponding SANS SEC401 course.

• Management of eleven servers (eight CentOS and three Debian, supporting LAMP stacks) on Google Cloud’s Compute Engine to successfully deliver an average of 1.5 million page views per month.• CentOS and Debian scripting for file and database backup, executed once a day via cron automation.• Firewall security enhancement by initiating and auditing a port scan of open ports on development and production server machines, closing unnecessary ports to the public while retaining internal accessibility.• Traceroute utilization among other network utilities to reveal access point that was under-delivering.• Site setup and content migration from over forty-five TeamSite instances to multi-site Drupal instances.• Consistent 100% customer satisfaction rating from the Zendesk ticketing system.• Data storage and transmission monitoring to ensure HIPAA and FERPA compliance.• MySQL scripting and database management.• Multisite Drupal instance setup, user provisioning, and permission allocation.

• Web development using PHP, HTML, CSS, and jQuery with the MVC framework.• Database management using Microsoft SQL.• Management of Continuing Education using the Moodle content management system.• Workstation installation.

Cleveland, Oh, Us

• Internal website migration from static HTML to WordPress format.• Migrated over thirty code projects from Polytron Version Control System to GitLab repositories.• Initialized and configured an IPv6 subnet scanner on an Ubuntu virtual machine to monitor Neighbor Discovery Protocol traffic with NDPMon. Set up a web interface to display the results from a browser window.

Yucaipa, Ca, Us

• Group leader, assisted students with algorithm, binary, and encryption exercises.• Aided in teaching students Android programming and Alice programming through hands-on projects and paired programming.• Provided setup assistance and troubleshooting for Android phones and tablets.

• Computer maintenance and RAM upgrades• Printer troubleshooting• Network implementation and security enhancement using WPA2-PSK with AES encryption• Fixed network downtime within an hour by troubleshooting a MAC address conflict between the router and the ISP.

Bachelor Of Science (Bs), Computer Science

Associate Of Science (As), Computer Science