Security Log Review Application & Support Resume

SUMMARY

Provided IT services for 20+ years, including router configuration, network administration, consulting, system virtualization and migration, network design & implementation, security analysis, audit compliance, & remediation.
Was cited for subject matter expert in Security Analysis and have received numerous commendations for spotting serious potential security infractions.
Have 12 years in audit and analysis experience with Sarbanes - Oxley & SAS-70/SSAE audit standards, ISO 900x and ITIL documentation standards.

AREAS OF EXPERTISE

PROFESSIONAL EXPERIENCE

Confidential

Security Log Review Application & Support

Responsibilities:

ESM &CCS manager policy updates, security patches & general tool maintenance.
Installation of new ESM/CCS agents to Windows & Unix/Linux servers.
Troubleshooting ESM/CCS installs, connectivity issues, agent upgrades.
Use SIEM Security tools to regularly scan and audit midrange Windows & UNIX servers to provide and maintain secure environment.
Run regular security audits against PCI, SOX, and SSAE standards requirements with ESM & CCS SEIM monitoring tools.
Run regular sweeps of DMZ environment checking for vulnerabilities.
Report findings of sweeps and audits to engineering teams to remediate security settings and assist when necessary.
Perform risk assessments on applications/environments when not able to correct violations or when new projects & applications are brought on-line.
Documentation of policies & procedures for management of security tools and associated scanning queries.
Management of contracted security team including employee reviews, personnel recommendations & evaluations.
24 x 7 rotated on-call support of ESM & CCS infrastructure.

Confidential

Application Management & Migration

Responsibilities:

Deployment of new web application servers into VCE Vblock Virtual Environment.
Security analysis and migration of existing web applications to VCE Vblock. (Physical to Virtual)
Documentation of policies and procedures for management of virtual systems and applications.
Upkeep and maintenance of virtual systems, On-call 24 x 7 support
Coordination with regional teams to gauge and prepare servers for virtualization

Confidential

IT Solutions - Platform Technologies

Responsibilities:

Deployed NearPoint email archiving solution to Outlook/Exchange clients.
Performed 2nd & 3rd level user support of MS Outlook issues.
Assisted users with migration of email .pst files into online archive.
Coordinated with end users for email data profile storage migration.
Handled data center server decommissions and hardware update for Microsoft server platforms.
Setup of lab equipment in IT Solutions Lab / Integration center.

Confidential

Consultant

Responsibilities:

Designed & implemented new network designs including router/firewall configurations.
Performed security analysis and made recommendations to secure networks against penetration.
Recommended and implemented antivirus/malware & internet solutions.
Installed & Maintained Windows Server Environments (2003, 2008)
Client PC repair & maintenance.
2nd & 3rd Level support of MS Office applications (all versions) on client pc's
Web & Email support (Outlook, IMAP, Pop3 & exchange connectivity)
New PC Build & Deployment.
Patch Management on client workstations & servers

Confidential

IT Security Specialist

Responsibilities:

Windows third level support of client reporting and manager maintenance for audits such as SAS 70, Windows security patches, and other audits.
Performed analysis & remediation for Windows NT, 2000, 2003, 2008 Platforms.
Designed new baseline standards documents & remediation policies for following platforms: Apache, LDAP, MySQL, SSH, & Windows 2003.
Assisted with remote access project via TACACS & Defender Token/Radius Windows Active Directory Authentication VPN solution and with its administration thereafter.
Implemented SiteMinder web site security authorization/authentication tool for midrange internal websites and maintained policy and user site administration until it was switched to Active directory in 2003.
Implemented & Administrated PKI infrastructure with certificate authority and associated key retrieval system.
Performed Active Directory Administration, Group Policy management, & DNS Forward Lookup configurations.