Global Manager - Security Engineering

• Apr 2022 - Present

Lead Security Engineer - US Operations

• Jan 2020 - Apr 2022

Security Engineer II

• Sep 2016 - Jan 2020

• Lead the MSS Engineering team in managing and maintaining multi-vendor firewalls and security devices.• Create and maintain process documentation.• Meet with stakeholders to understand current security infrastructure and consult on future needs.• Design and Implement changes to multi-vendor firewall configurations.• Perform investigations and troubleshooting on multi-vendor firewalls. • Configure, manage, and troubleshoot S2S VPN tunnels on multi-vendor firewalls.• Configure and troubleshoot NAT/PAT policies on multi-vendor firewalls.• Perform updates, and upgrades on multi-vendor firewalls.• Perform installation and configuration of security monitoring tools in support of our ProSOC services.• Developed two Python scripts for our Active Defense service blocking black-listed IP Addresses and CIDR blocks on firewalls.• Configure, deploy, and manage scripts that connect to API’s for log collection.• Deploy and maintain sensors for Network Monitoring for all devices under scope (Collectors, Collector Agents, Servers, Security Devices, and SIEMs).• Deploy, manage, and maintain CentOS VM deployments into customer environments.• Investigate and resolve tier 2, and 3 Security Incidents.• Utilize SIEM to investigate Security Incidents and Connector/Collector Health investigations.• Perform weekly audits of all customer’s devices under scope ensuring proper configuration, parsing, and log flow.• Investigate and resolve issues with log collectors/connectors that interrupt proper parsing and/or log flow.• Document existing and in-development procedures, and training documentation. Show less

Security Engineer II

• Mar 2008 - Aug 2016

• Perform LogRhythm SIEM alert analysis and administration. • Perform multi-vendor firewall administration, and management. • Perform legacy firewall and IDS/IPS administration, and management. • Design and implement policy change requests. • Perform IDS monitoring, log analysis and incident response to alerts. • Investigate, document, and tune IDS alerts. • Implement firmware upgrades, patches, fixes, and signature updates. • Perform firewall migrations, and firewall hot/cold swaps. • Perform functionality tests on cold spare security devices. • Configure, and troubleshoot VPN’s using CLI and GUI. • Document existing and in-development procedures, and training documentation for security incident analysis. • Train engineers in security alert and incident processing, troubleshooting, and escalation procedures. • Train engineers in change control management, documentation, and implementation. Show less

Network Engineer

• 2007 - 2008

• Perform Checkpoint and Cisco firewall administration implementing policy changes and troubleshooting. • Perform Cisco router and switch administration and troubleshoot network faults. • Provide assistance with optimization of systems and protocols, and change management support. IOS feature review, and IOS deployment support. • Plan, coordinate, implement and support the LAN/WAN hardware, software, and Intranet/Extranet integration and linkage. • Administrate software, ticketing system, What’s Up Gold remote monitoring software, and proprietary remote monitoring software. Show less