Tom Mcvay Email & Phone Number

Cary, North Carolina, United States

Raleigh-Durham, North Carolina Area

Core responsibilities include management and administration of the Security Information and Event Management (SIEM) solution and to oversee endpoint protection. As current Splunk Cloud administrator, built the SIEM that a team of 6 uses daily. Assist in managing day to day security operations for security team, and help to identify, hunt for, mitigate, and prevent security threats. Maintain and manages the security log collection systems. The log collection system includes internal Splunk infrastructure of Linux and Windows based search heads, heavy forwarders, universal forwarders, and a Syslog-NG server. Create Splunk data inputs, develop use cases, write searches, reports, dashboards, and develop workflows and automations. Additional responsibilities include support and maintenance of the Endpoint Detection and Response (EDR) solution, CrowdStrike and McAfee Endpoint Security Anti-Virus. Using these tools advance features, create custom detections that enhance the detection and protection from threats as well as automate the handling of security events. Also work to keep these solutions up to date in the enterprise. Using Splunk, Office365 tools, and scripting, developed a workflow to manage and respond to phishing emails. Assisted in the securing, reporting, and responding to Office365 security threats using Exchange email rules, spam management, data exfiltration, and Office365 security tools.Utilize APIs, and write scripts in Python, Powershell, and Visual Basic to assist in the data input and the automation of security tasks. Completed enterprise level solutions implementation including research, proof of concept, testing, comparisons, and recommendations to upper management for new security products. Created business resumption documentation and backup procedures for security tools. Assisted in the writing, distribution, and organization of enterprise security policies.Additional duty include being the backup for TEGNA’s director of security.

Help manage our SCCM environment of over 30,000 workstations over 110 different sites. This includes site setup, training, distributing software, updates, OSD deployments, and reporting. Help to create client computing standerds and best practices for the company. Help with any group policy issues. Work with the mobile device management of all phones and tablets.

Bachelor'S Degree, Management Information Systems, General

Education record