Joseph Bloom

As a full-stack, website developer, I was hired to create websites for individuals and businesses. In addition to user-facing, web page development, I had to know about browser functionality using javascript, and server-side programming with PHP and databases using MySQL. I've managed the hosting and domain registration for most of the websites I've developed. Some of my clients have included independent musicians and music teachers, a dog-sitting and training service, a journalist, and a clothing alterations business. My responsibilities to these websites have included the design of clear user interface to convey important information to customers or viewers, the maintenance of information on the websites, administration tools for the website owners so they may update their own websites as needed, and mitigation of any bugs, web security issues, or down time.

In this role, I worked in a three-person team to design and implement a large, multi-tenant SIEM deployment at Vijilan using Python, the data analytics tool Logscale, and NXLog. This work included writing microservice applications to retrieve client telemetry from various cloud, network infrastructure, and endpoint sources. 3rd party vendor API, regular expression, and syslog were common features in these applications. These applications retrieve and read network, antivirus, application control, and IPS activity, and normalize this information for the benefit of Vijilan’s SIEM detection library and SOC analysts' investigations. The rest of my work revolved around identifying gaps in our internal software, and working with our Support and Investigations teams to design, build, test, and deploy solutions that automate repetitive or time consuming tasks. These projects included automated deployment of monitoring services and applications for new clients, automating internal audits of log retrieval and parser errors so that issues were immediately addressable for me and the rest of my team, and creating an alerting process that escalates low-investigation events to the attention of clients without unnecessary analyst intervention.