Symantec McAfee Data Loss Prevention DLP and HDLP - Security Varonis IT - Cloud - WEB Based or Aletlogic SIEM - CyberArk password safe and vault - Juniper and Palo Alto firewall rule validation and cleanup projects - Identity and Acess amangement - Active Directory and user rights and file share rights review and remediation - Direct Acess - hard disk encryption - Mobile device management - Security generalist - wide breath of knowledge - ability to learn new products and applications on the run. Serverman2k@Hotmail.com 8/2/2012 – 1/20/2016 Peoples United Bank – Senior Information Security Engineer Enterprise Technology Risk Management • SIEM – work with application owners to define and test metadata and keyword SIEM collection events. • SIEM Reports daily monitoring of account lockouts and group adds and group changes • SIEM Run custom SIEM reports creation and report enhancements and updates for investigations etc. • SIEM Maintain current cloud environment resolve vendor issues missing reports unresponsive portal • SIEM Install fix and repair and remove SIEM server agents as required by server additions removals rebuilds upgrades etc. • SIEM Security Log Findings Monitor – Review Generate and report daily. 3rd party cloud based SIEM provider. • SIEM reports Generate custom based on security incidents, example persistent account lockouts – • CyberArk I.D. Assessments work with Identity and Access management teams need to be in a Vault • CyberArk create SIEM rules to determine when CyberArk ID’s are logged in via event ID289 • CyberArk determine why CyberArk ID’s are not working and where accounts are locking out. • CyberArk work with Management and Identity and Access management teams to document Safe owners in Sharepoint • CyberArk work with application owners to educate train about privilege ID use make sure all critical id are safe. • CyberArk process of opening tick