Analysis logs using SIEM tools Splunk, Sumo Logic, Rapid 7, Qradar, MS Sentinel, LogRhythm and EDR tools Crowd Strike. Work on tickets in the queue for clients using the Diamond Model and escalating tickets to 2nd level to meet SLA's. Triage Phishing emails for clients from emails submitted by users.

Provide Detection on the Global General Motors Network to find malicious malware, and ransomware. Monitored, Detect and evaluated the packets on the network using a variety of tools to determine if an information security event violation occurred. When a incident was identified it was escalated to the appropriate Teams to ensure the affected assets on the network were contained and remediated.•Provide real-time monitors Security Information and Event Management (SIEM) systems(HP Arcsight ESM), and threat intelligence reports(Cisco ThreatGrid) to detect and research security-related alerts and events(Squil).•Research various security events using research tools and threat intelligence to determine when an incident has occurred•Evaluated malware, and ransomware characteristics and recognize known characteristics in the wild•Analyze “sweeps” the IT environment looking for indicators of compromise•Follow detailed operational process and procedures to appropriately triage, analyze, and escalate critical information security events.•Consume Threat intelligence to proactively detect threats to the GM IT infrastructure•Created tactical, ad hoc scripts using python to supplement existing tool base as needed•Used network security monitoring tools (IDS events, Flow tracking, Packet loggers, etc.) to properly analyze and respond to information security events.•Escalated to the appropriate Teams such as Network, Outlook, Incident Handler •Used forensics applications and other host based tools (file, memory, and disk analyzers)•Wrote scripts in Python to create automated tools to help detect threats quickly to contain threats on the network•Provided written and verbal communication skills •Worked in a Team environment

Provided a Service to End Users and Onsite Technicians by running the VEC, 7000, and Cadillac Asset Room•Improved the loaner notebook process by automating to produce a form from a access database•Handed out and shipped Accessories such as mice, batteries, Lan Cables, Cable Locks, Monitors, and keyboard to End User's etc. from IT Service Center Request•Did daily repairs of HP and Dell Hardware Notebooks and Desktops and used the check list that I created to improve the accuracy of the assets are in working order for the End User's and technicians tickets•Managed Assets using tools such as Asset Management to track the Assets on a Daily Basis and used Service Manager tool for loaner notebooks, software and hardware request issues•Helped end users and technicians by resolving their Hardware and Software issues•Provided Training to End User’s, Team Members, and Onsite Techs such as configuring their phone, fixing software and hardware issues•Followed the Global Pc Refresh Steady State Process as it pertains to the Data of the End User's Assets Data required by Legal Staff and filling out the Chain of Custody form for users that were in litigation hold•Provided loaner notebooks to End User's so there would be no downtime for projects and to keep productivity •Imaged Win 7 builds on Loaner Notebook assets and run APP install and patches to keep up to date and installed HBDE and Bitlocker for File encryption•Provided Hardware Desktops, notebooks, and Monitors to End user's, On Site Tech's

Provided Refresh and Onsite field Services to End User's•Refreshed End User's Assets from windows XP to Windows 7 on Notebooks and Desktops•Entered, Updated and Closed tickets using the tool Tech Management•Managed Assets using tools such as AMP to track the Assets on a Daily Basis•Used the tool Active Directory to add users and computers•Installed software using the APP Install tool and installed HBDE for file encryption•I used troubleshooting and resolved the end user's issues on a timely matter so there was no loss in productivity•Used the backup tool to backup and restore user's data using the windows easy transfer tool•Verified the applications, user's data, mapped drives, and printers by checking the check list

Update POS registers in the 7 Eleven StoreRun Scripts on Windows 2003 Server to install new software on the new POS registersSetup user and configured touch screen for user inputSetup remote access in windows XPRemove old equipment and setup up new equipmentSetup new POS register, printer, pin pad, scannerRun cables for POS registersTested and verify totals for POS registerTrained employees on how to use the new system