Stephen Murphy Email & Phone Number

Albany, Ny, Us

● Scaled out QRadar SIEM to enhance visibility, reduce false positives, and improve detection of security and compliance issues. ● Collaborated with vendors to resolve QRadar on Cloud deployment and performance issues.● Implemented custom log sources for applications and devices not natively supported by QRadar. ● Tuned on-prem IDS/IPS systems for increased visibility of activity related to known vulnerabilities on network and improved Firepower Threat Defense performance.● Optimized Tenable.sc network scanning configuration to cover more LAN segments, resolved issues where scans impacted devices, and implemented credentialed scanning for higher quality data.● Deployed CrowdStrike EDR, Data Protection, File Vantage, Identity Management, Recon+, and Spotlight to replace Cylance AV and Recorded Future threat intel feed into QRadar.● Used CrowdStrike Identity to implement two factor authentication for administrative logins and web applications, reduce AD configuration issues, monitoring for unusual account activity, and email alerting to users for compromised passwords. ● Monitored data loss using CrowdStrike Data Protection, later blocked USB storage where possible on end-user devices using CrowdStrike device control policies. Built an exceptions process for USB storage where required to support business operations. ● Evaluated CrowdStrike Next-Gen SIEM and Spotlight as potential QRadar and Tenable.sc replacements.● Developed business case for Cisco Umbrella to filter endpoint Internet traffic, implemented proof of concept with network team, and performed final deployment. ● Assisted Legal, HR, IT, and other departments accessing logs and other information stored in QRadar, CrowdStrike Next-Gen SIEM, and other security tools to support investigations and troubleshooting.● Performed periodic pen-testing and social engineering to validate internal security controls.

Rensselaer, New York, Us

● Created processes, procedures, and training for NYISO’s first Cyber Security Operations Center (CSOC), enhancing operational capabilities.● Acted as a subject matter expert in NERC CIP, performing annual assessments, representing the company during audits, and transitioning from CIP v3 to v5.● Maintained and enhanced QRadar SIEM with custom rules, reports, log sources, and User Behavior Analytics for improved monitoring.● Implemented Symantec Endpoint Protection’s firewall and device control functionality, and added Symantec EDR to improve endpoint monitoring and threat response capabilities.● Deployed ThreatConnect to automate IOC handling and built playbooks to streamline CSOC processes.● Collaborated with infrastructure teams to implement Microsoft 365 and AWS cloud monitoring using SIEM, developing processes for detected security events.● Led forensic investigations, managed incident response processes, and gathering evidence.● Conducted web application security assessments, penetration tests, and mitigated identified issues.● Maintained vendor relationships and licensing for security products.● Participated in architecture review board meetings to ensure security requirements in new systems.● Helped design architecture and processes to meet NAESB PKI standards.● Used MITRE ATT&CK to identify monitoring weaknesses and enhance capabilities.● Participated in industry tabletop exercises and creating internal technical injects to make the exercises more applicable to the organization.

Rensselaer, New York, Us

• Assisted network team with deployment of QRadar SIEM by adding custom properties and DSMs.• Managed Solaris and Windows servers running various applications supporting operations.• Led migration from Weblogic to JBoss and Tomcat, reducing operational costs.• Automated administrative tasks with shell scripts, improving efficiency and reducing errors.• Enhanced web application security by hardening applications and minimizing exposed functionalities.• Improved PKI infrastructure by implementing OCSP.

Albany, Ny, Us

● Designed, built, maintained, documented, debugged, and performance tuned workflows inPegaWORKs and PegaRULEs business process management systems used to automatehealth care claim processing, customer service, and call center workflows.● Integrated Pega with telephony equipment allowing Pega to prefetch customer data while thecaller is on hold and route calls based on interactive voice response menu choices.● Trained, supervised, and mentored client staff on Pega and web development.

• Created and maintained ASP and MSSQL applications for substance abuse treatment centers and health monitoring.• Designed and implemented backup strategies for web and database servers.

East Lansing, Mi, Us

● Created dynamic websites to automate tasks like maintaining course web pages, faculty andstaff directories, listing internships, applying to the business college on-line, scheduling libraryroom reservations, tracking alumni and finding alumni clubs.

East Lansing, Mi, Us

• Upheld community standards and promoted a positive living environment.• Provided resources and guidance to residents, assisting with conflict resolution and fostering a supportive community.• Collaborated with fellow resident assistants to organize events and programs enhancing student life.

● Helped develop and test XML/XSLT architecture for new projects.● Assisted in the development of intranet sites allowing clients to manage Documentum libraries.

Mba

Bs, Computer Science