Jack Etheridge

• Led a team of 4-5 Security Engineers in managing daily operations and incident response • Completed successful migration of all data from QRadar to Google SecOps SIEM • Brought in 10 new log source types into Google SecOps SIEM to expand threat coverage • Created a Google SecOps SOAR Playbook Architecture to automate notifications, enrichment, and actions for every incoming case while implementing automated tuning to eliminate noisy false positives • Created and maintained a daily operations program that my team used to distribute daily tasks and provide one pane of glass for tasks to promote efficiency • Added Google SecOps MCP Agent abilities to our internal Security AI Chatbot so that it can search for context on users, alerts, hosts, etc.

• Consistent and rapid response to incident alerts in the SOC while on-call • Implemented next generation SOC, fully integrated with the SIEM, by prioritizing rules for deployment and configuring connections with the SIEM • Project managed 100% log source coverage of domain controllers in our environment by compiling a list from the EDR and providing WinCollect installation procedures to dozens of associates • Installed and managed a new Digital Risk Protection platform, which included collaborating with the asset management and marketing teams to generate an asset list, configuring a cloud integration to compare exposed credential users to enabled users, resolving hundreds of initial alerts, and authoring a process document for other engineers to follow • Compiled data and evidence for multiple SOC 2 Audit Reports, including proof of log source visibility and alert response and analysis • Created several custom incident response rules for the SOC generating from the SIEM, including 10 EDR Audit alerts, Panorama WildFire alerts, and Thycotic Sensitive Secret Viewed alerts • Produced three automated response plays to common alerts, including initiating device scans and isolating devices, to reduce alert fatigue and response times • Manager of the SSL Certificate notification and renewal processes for more than 100 different domains across the environment • Incorporated geodata into all SIEM events for improved triage and investigation

• Scanned unregistered Zebra domains for potential vulnerabilities • Ensured coverage and reliability of their Bug Bounty Program • Developed and updated several RFP processes

• Oversaw basketball and/or volleyball games • Maintained respect between players, coaches, officials, and parents • Implemented rules of the host school where the games were played at