Systems Security Engineer

• Built, maintain, and operate Splunk instance to collect and analyze system events logs from endpoints (e.g. servers) for compliance with NIST 800-53 standard.
• Maintain and operate Varonis, a Data Loss Prevention tool, to detect and classify sensitive data from Windows Servers and SharePoint sites
• Run Netsparker Standard and Enterprise software edition scans to prepare and review application vulnerability reports for NINDS applications. Report vulnerabilities identified to developer teams via ServiceNow security tasks.
• Review and approve quarterly desktop images for both Windows and Mac Operating System workstations provided by IT Support team to ensure compliance with NIST 800-53 standard.
• Administer Cylance Antivirus Console. Perform updates to agents on endpoint workstations and servers. Triage any malicious activity.
• Report on completion of monthly server and workstation operating system patches from BigFix patching tool. Query vulnerabilities from Tenable SecurityCenter.
• Respond to and assist with resolution of security incidents as required.

Technology Teacher

• Provide students with the capability to use technology in order to enhance their learning about Judaism
• Perform Computer Support and Maintenance

Webmaster

• Built several versions of the Booster Club Website using WordPress
• Manages Social Media Profiles and post regular content updates

Security Analyst

As a Security Analyst, I am part of the ID.me team that plans and executes security measures to protect our computer networks and systems. My responsibilities are continually expanding as the number of cyberattacks increases and I work to protect sensitive customer data. My responsibilities include:

• Maintaining information security and cybersecurity related policies, standards, and procedures.
• Assess corporate-wide compliance with policies and standards and take action to remediate non-compliance.
• Assist Non-Information Technology departments with data surveillance and monitoring practices.
• Analyze the integrity of changes made to the network through configuration and patch management programs.
• Monitor the use of data files and regulate access to sensitive data repositories.
• Ensure practices satisfy the requirements of Federal, State, and local laws and regulations.
• Work collaboratively with all departments to ensure that local practices are consistent with corporate information security policies and standards.
• Monitor the legal and regulatory landscape to proactively address new information security related requirements.