Senior Security Engineer
Current- Create and oversee a Vulnerability Management Program spanning multiple teams to identify security concerns and inefficiencies and recommend and follow through on corrections- Prepare bash scripts, regex searches, and SIEM rules to quickly analyze high volumes of raw logs and network data in support of incident investigations- Daily review of Secureworks XDR (SIEM), Crowdstrike Falcon (AV and EDR), and Office 365 Security and Compliance to Threat Hunt IOCs, Data Loss Prevention, and malicious email links/attachments - Tenable SME: optimize scanning profiles to load balance and reduce scanning duration; use regex to create dynamic asset groups; create dashboards and reports for weekly review - Create approved processes and policies and document them. Prepare event and incident documentation as needed