Bio

Deep technical knowledge of numerous Security tools from nearly a decade of career experience in SOC, SIEM, IR, SOAR, & Security Analytics. Hands-on experience with nearly every major enterprise security tool supporting both business needs and Security Operations. A strong affinity for solving problems as close to the source as possible, in as simple a way as possible, focusing on building a robust and resilient platform. • SANS Certified; GCUX, GMON, GCIH, GCTI, GCFA, GSEC • Splunk Certified Architect • Splunk Trust Member • (ISC)2 SSCP Certified • (ISC)2 Exam Development SME, Job Task Analysis, & Item Writing • CCNA Certified (expired) • ArcSight Activate Content Developer • CompTIA A+ Certified (expired) • Analytical, intuitive, and efficient • Problem solver and quick learner • Keen eye for process development/improvement • Innate ability to distill complexity • Highly organized and attentive to detail • Various levels of familiarity and/or expertise with: • Splunk, PowerBI • *nix, Mac, Windows, Azure, AWS • O365, Visio/LucidChart, Wiki/Knowledge Base, documentation • bash, ldapsearch, regex, syslog/auditd, xml, dhcp, dns, sysmon • Active Directory, ArcSight, AttackIQ, Cofense/PhishMe, CrowdStrike, CyberArk, Cylance, Demisto, DLP, Illumio, Imperva, Jira, LastPass, McAfee, PaloAlto, Prisma, ProofPoint, Qualys, RecordedFuture, RedSeal, ServiceNow, SkyHigh, TripWire, WebSense, etc