● Investigate security incidents and alerts from XDR solution, remediating user account and endpoint risks and threats. ● Developed SOAR automation targeting an ever-improving response time; increasing network and domain security, lowering business interruptions and securing against attacks and lateral movement. ● Conduct ongoing vulnerability scanning and baseline penetration testing to confirm the presence of, or defense against known vulnerabilities and attack vectors, remediating as necessary. ● Script and function automations using powershell to apply patches, firewall settings, deploy software install and uninstalls to meet business use cases, removing outdated or defunct tech, as well as everyday device administration and intune-based custom compliance. ● Orchestrated migration from traditional endpoint protection to XDR solution. Analyst responsible for day to day security operations, investigations, remediation and monitoring. ● Apply patch management practices to remediate vulnerabilities in business software, applying triaging principles of risk and business operations. ● Consolidated alerting to SIEM solution for event correlation to improve investigation and remediation capabilities, response time and accuracy. ● Configured redundant email filtering adding O365’s built-in solution without impairing user operations, improving true positive filtering of confirmed malicious and nuisance deliveries by approximately 10% daily. ● Evaluated domain security for best practices using open source tools such as PingCastle and Bloodhound to minimize common misconfigurations ● Serve as a resource for proactive and reactive user education on all security inquiries, questions and concerns. ● Leveraged next-generation data loss prevention capabilities to protect business data and maintain regulatory compliance ● Implemented organization-first MFA requirements and rolled out DUO protected logins for local, remote and cloud resources.

Operational tasks and responsibilities ● Team escalation point in network, hardware and software troubleshooting ● Local education authority tech lead handling two schools IT budgeting, project management, network and systems administrationOngoing management and monitoring ● Designed and maintained an application review procedure to allowlist district requests for add ins, applications, extensions to ensure and maintain security posture while supporting educational goalsSpecial projects ● Advocated and implemented the split of operational and elevation accounts. ● Automated windows updates to ensure timely deployment of OS patching

Operational tasks and responsibilities ● Identify, test and isolate code and design defects ● Troubleshoot browser, machine, server and network issues

Operational tasks and responsibilities ● Contracted support in data breach first response and forensic controls ● Device identification, evidence preservation and support of forensic investigation procedures

Imaging and deploying of student technologies. Troubleshoot basic IT concerns.

Evaluate the risks and strengths of commercial borrowers, advocating for appropriate controls and policy compliance.

Perform transactions and offer help and services to customers. Assess risk of transactions, check for fraud or misuse of offered services.

Oversee employees, order products and produce, execute inventory counts and reconcile orders.

Developed an abbreviated media plan to maximize floorplans for advertising on the Signspace Database.

Answer Professor / Faculty questions regarding computers, software, projectors, and the Alma Network.Deliver Media Carts to classrooms for scheduled presentations.

My time was split between helping the permanent Graphic Designer with creating ads, flyers and brochures, as well as keeping / updating the website, and creating mailing lists, and following up on leads.