Will M.

Confidential

Microsoft Security Mastery: • Demonstrated comprehension of Microsoft security technologies and strategies. • Proven track record in effectively leveraging Microsoft's security ecosystem to enhance organizational defense mechanisms. • Adept at aligning security measures with business goals, fostering a secure and resilient operational environment. Cybersecurity Architecture: • Design and implementation of enterprise-level security architectures. • Expertise in network segmentation, secure access controls, and encryption mechanisms. • Proficient in utilizing industry frameworks such as NIST and ISO 27001 for comprehensive security coverage. Threat Intelligence: __ Deep understanding of cyber threats and attack vectors. __ Skilled in utilizing threat intelligence tools and platforms to proactively identify emerging threats and develop countermeasures. Incident Response: __ Proven track record of leading incident response efforts. __ Experienced in detection, containment, eradication, and recovery. __ Coordination of incident response activities with internal teams, external vendors, and law enforcement agencies. Vulnerability Management: __ Expertise in conducting vulnerability assessments. __ Proficient in managing vulnerability scanning tools like Nessus, Qualys, Rapid7, and OpenVAS. __ Prioritization of remediation efforts for identified vulnerabilities across complex environments. and reporting. Compliance and Risk Management: __ In-depth knowledge of regulatory compliance frameworks (GDPR, HIPAA, PCI DSS). __ Experience in developing and implementing controls to ensure compliance. __ Proficient in conducting risk assessments and implementing risk mitigation strategies. Cloud Security: __ Expertise in securing cloud environments (AWS, Azure, Google Cloud). __ Design and implementation of cloud security architectures. __ Specialized in identity and access management (IAM), encryption, and logging mechanisms.

• Security Architecture: o Spearhead the design of comprehensive security architectures, leveraging expertise in EM+S, ATP, AIP, and Intune. o Implement Azure Key Vault, Security Center, Operations Management Service, and Log Analytics for proactive security measures. • Identity and Access Management: o Apply B2B and B2C cloud design principles to establish secure identity and access management frameworks. o Contribute to the architecture and security management, ensuring alignment with industry best practices. • DevSecOps: o Implemented automated security checks in the development pipeline, ensuring the continuous delivery of secure code and minimizing vulnerabilities in the DevSecOps environment. o Collaborated with cross-functional teams to integrate security controls into the development lifecycle, fostering a proactive security culture and reducing vulnerability exposure through the adoption of DevSecOps best practices. • Risk Mitigation and Analysis: o Execute thorough risk analysis, employing a solid understanding of security best practices. o Identify gaps in current defensive postures and drive initiatives to fortify security controls. • Cloud Security: o Expertise in securing network and enterprise cloud applications, employing cutting-edge technologies. o Implement privileged access management solutions for enhanced security. • Compliance and Frameworks: o Ensure compliance with security frameworks such as ISO/IEC 27001, NIST 800-53, and OWASP. o Contribute to building security frameworks, SIRRP processes, and forensic handling methods. • Technical Proficiency: o Possess knowledge of host hardening, auditing, logging, monitoring, network security, SEIM deployments, security analytics, anomaly detections, and PKI.

• Incident Response and Management: o Lead response efforts to security events, engaging in investigations and employing advanced tools for incident reporting. o Collaborate with security architects and development teams to enhance organizational defense mechanisms. • Technical Expertise: o Provide level 3 support for technology issues, configuring, installing, staging, and maintaining servers, security hardware, and software. o Analyze and remedy cyber-attacks using Qualys Network Scanner, Nexus Vulnerability Scanner, and Network Detective Scanner. • Project Management: o Assist in project and cybersecurity critical decisions, supporting the department head in the selection of new hires. o Strategize and oversee all disaster recovery plans for multiple locations, ensuring robust security layouts and implementations. • Security Infrastructure Implementation: o Implement SIEM solutions such as Alien Vault and Splunk, investigate network vulnerabilities using Qualys and Nessus. o Configure and install advanced tools like Darktrace Cyber AI for enhanced cybersecurity measures. • Global Infrastructure Management: o Visit multiple sites globally, including the UK, China, and Texas, conducting security layouts and implementations. o Determine appropriate system configurations for servers, networks, security, and telephony considerations. • Technology Integration and Management: o Conduct system tests, monitor results, and recommend corrective actions through strict change control procedures. o Configure and install tools like Darktrace Cyber AI, provide systems metrics, root cause analysis, and proactive monitoring. • DNS Configuration and Global Management: o Configure DNS servers globally, ensuring seamless and efficient domain name resolution. o Maintain firewalls and manage security measures related to hacking attempts. • Policy Planning and Appraisal: o Plan and conduct ongoing assessments of antivirus, application control, Firewall, SIEM, VPN, SSL,

• Vendor Collaboration: o Work seamlessly with third-party vendors including Cisco, HP, All covered, NeverFail, Symantec, and Malwarebytes, ensuring effective technology partnerships. • Infrastructure Planning and Implementation: o Plan and execute colocation moves for disaster recovery sites across multiple locations, utilizing solutions like NeverFail for replication. o Upgrade Windows servers from 2008 R2 to 2012 R2 in virtual environments, ensuring optimal performance. • Network Configuration and Optimization: o Configure Cisco wireless LAN controllers with multiple access points, enhancing network connectivity. o Reconfigure and upgrade SQL server 2005 to 2008, optimizing database performance. • Security Measures and Countermeasures: o Configure and install SIEM for robust security countermeasures, employing tools like Kali Linux for in-house penetration testing and exploit discovery. o Implement Symantec Endpoint Protection Manager, Shavlik for patch management, and Malwarebytes endpoint security for comprehensive threat prevention. • Virtualization and Server Management: o Configure VMware ESXi hosts, upgrading from 5.5 to 6.0, supporting a multitude of virtual servers on Windows platforms. o Set up conference rooms using Zoom Software, reconfigure Cisco AnyConnect VPN for over 200 users. • Cloud Integration and Data Migration: o Install and configure Office 365, migrating from Exchange 2010 to Office 365 for seamless data management. o Implement Forcepoint Email Security and CWS Cisco Cloud Web Security controls for enhanced cloud security. • Training and Compliance Initiatives: o Conduct Data Loss Prevention Training and deploy Sans training for employees, ensuring a knowledgeable and compliant workforce. o Establish and configure Air Watch MDM solution for efficient mobile device management.

• Network Infrastructure Configuration: o Configure and install SonicWALL, Cisco NSA 240/250, Cisco ASA 5550/5506x/5505, SAM Controller HP2000 SAS, switches, routers (HP, Cisco, Dell, IBM), and access points. • Security Measures and Vulnerability Management: o Conduct daily Qualys network vulnerability scans, analyze results, and collaborate with the Network Support team for timely remediation. o Analyze and remedy cyber-attacks using Qualys Network Scanner, Nexus Vulnerability Scanner, and Network Detective Scanner. • Firewall and Connectivity Troubleshooting: o Configure and troubleshoot firewall connectivity, content filtering, and web filtering. o Troubleshoot connectivity issues with SonicWALL SSO Agent, ensuring seamless network operations. • Windows Server Management and Migration: o Reinstall Windows Server 2008 and Windows Server 2012 with SQL 2012, ensuring optimal server performance. o Migrate users to Office 365 using Cloud Solutions, facilitating efficient collaboration and data management. • Remote Management and VPN Configuration: o Deploy and configure Onsite Manager for remote client management, enhancing network accessibility. o Create VPN connections for clients using SonicWALL Net Extender and Cisco AnyConnect, ensuring secure remote access. • Virtualization and VMware Management:

• User Support and Active Directory Management: o Provide technical support to a large user base, working with Active Directory to unlock accounts, reset passwords, and manage user group memberships. o Lead Post Migration Support for Windows 7 and MS Office 2010, ensuring a smooth transition for all users. • Project Management and Collaboration: o Contribute to various key IT projects, including Windows XP to 7 migration and Exchange 2010 migration, showcasing effective project management skills. o Collaborate with support groups to address application issues and provide resolutions, ensuring seamless operations. • Hardware Setup and Troubleshooting: o Set up local and network printers (Xerox and HP) for users, troubleshoot, repair, and order parts for desktops (HP) and laptops (Lenovo). o Process iMac and Break Fix tickets, demonstrating proficiency in hardware support for diverse client needs. • Software Configuration and Device Support: o Set up Outlook 2010 with shared mailboxes, add PST files from previous machines, and assign users to laptops using McAfee Encryption tools. o Handle BYOD setup for Android, iOS mobile devices, and Windows 7, 8, and 10 devices, showcasing versatile device support. • System Rebuilding and OS Familiarity: o Rebuild laptops, PCs, and Virtual Machines through USB or network processes, ensuring optimal system performance. o Possess familiarity with Mac OS X devices, providing comprehensive support for a diverse range of operating systems.

• Global Customer Support: Assist over 40,000 customers worldwide, providing effective solutions and support. • Team Leadership and Collaboration: Lead Level 1 and Level 2 technicians, actively contributing to critical tasks and providing support. Conduct weekly one-on-one meetings with Level 2 technicians, enhancing team communication and performance. • Project Management and Technical Expertise: Assist in migration from Outlook 2010 to Office 365 Pro Plus, ensuring a seamless transition. Lead the Dell PC refresh project, deploying and re-imaging over 400 laptops and desktops. • Information Security and Incident Management: Collaborate with Information Security on detecting malware threats, vulnerability issues, and fraudulent emails. Monitor and analyze client’s network infrastructure using SIEM technology, implementing SPLUNK for dashboard development. • Technical Training and Mentorship: Mentor technicians to improve customer service skills and enhance overall team performance. Provide training on various information security aspects, including penetration testing, cryptography, and network scanning techniques. • Active Directory Management: Work with Active Directory, performing tasks such as adding/removing users, resetting passwords, and checking user permissions. Add user mailboxes to Exchange servers and troubleshoot mailbox issues, ensuring efficient email management.