CyberNow Labs

♦ Conducting log analysis on Splunk Enterprise Security and IBM QRadar SIEM solutions and providing recommendations to the technical teams via the Jira ticketing system.
♦ Monitoring and analyzing SIEM alerts through Splunk Enterprise Security and IBM QRadar and identifying security anomalies for investigation and remediation.
♦ Analyzing malicious incidents using SentinelOne and CrowdStrike EDR solutions, identifying indicators of compromise, and preparing incident reports on the impact and scope of these activities using IBM QRadar SOAR. 
♦ Conducting analysis activities to determine the legitimacy of files, domains, and emails using OSINT resources such as VirusTotal, AnyRun, CyberChef, HybridAnalysis, and MX Toolbox.
♦ Analyzing phishing incidents using Proofpoint Email Security and Protection and documenting incidents using IBM QRadar SOAR. 
♦ Familiarity with various tools such as Tenable Nessus, Revelstoke SOAR, and analyzing PCAP files using Wireshark.
♦ Familiarity with the fundamentals of network and information security, network technology and tools, identity and access management, risk management, and SANS Incident Response. 
♦ SOC Shift Team Lead providing leadership, training, motivation, and guidance to other analysts.

Security Operations Center Analyst

Avertium

♦	Monitoring, triaging, and analyzing alerts in several SIEMs including LogRhythm, AlienVault Central and Appliance, Microsoft Azure Sentinel, FortiSIEM, and Splunk Enterprise Security, and identifying security issues for investigation, troubleshooting, and remediation. 
♦	Ensure all tickets are handled and resolved and in compliance with SLAs (Service Level Agreements).
♦	Conducting log analysis on these alerts and providing recommendations to the technical teams via the ConnectWise ticketing system. Writing documentation and logging activities in a Shift Daily OneNote file.
♦	Monitored the health of multiple SIEMs, EDRs, and other systems. Escalate to Shift Leads and Engineers as needed.
♦	Interface with clients as needed via emails and telephone calls.

Cyber Security Analyst

Michael Liebert Training Company

♦	CyberNow Labs – Learning how to use the tools of the trade in an immersive, hands-on Security Operations Center utilizing both classroom sessions and shifts in the SOC.
♦	Professional Institute of Technology – CompTIA Security+ classes.
♦	CompTIA CertMaster Learn, Labs, and Practice – Self-study on all three of these platforms for all four of my CompTIA certifications.
♦	Mike Meyers Total Seminars – Self-study courses for the CompTIA A+, Network+, and Security+ exams.
♦	Professor Messer Videos - Self-study courses for the CompTIA A+, Network+, and Security+ exams.
♦	Building a Home Lab – Designed more as a Blue Team lab to use for LetsDefend, OSINT research, practicing Linux and Wireshark, and assessing my home network vulnerabilities.
♦	Online Training Platforms – Self-study via the LetsDefend, RangeForce, and TryHackMe gamified training platforms and studying as an (ISC)² candidate.
♦	Linux – Self-study of several Linux fundamentals course online through Udemy.
♦	Wireshark - – Self-study of several Wireshark fundamentals course online through Udemy.

Student - Cybersecurity

Wynn Las Vegas

♦ 	Provided exceptional customer service working at the only Forbes 5-Star rated casino resort in the world.
♦ 	 Protected company physical assets as well as sensitive information.
♦ 	 Protected customer confidential information.
♦ 	 Trained team members on cheating detection and prevention methods.

Casino Supervisor

Empress Casino Hammond Corporation

♦	Worked in an environment equivalent to that of a cybersecurity Security Operations Center.
♦	Began as a Surveillance Agent and was promoted to Surveillance Supervisor and Surveillance Manager. 
♦	Most important job duty also equivalent to that of a SOC: protecting all company assets. 
♦	Trained and motivated a small, dedicated team to develop the skills required to protect company assets.
♦	Conducted company-wide training/mentoring on new customer service initiative.

Casino Surveillance Manager

I am an accomplished guest service professional from the casino gaming industry that has transitioned to a career in cybersecurity. I am an intuitive learner that can pick things up quickly and make valuable contributions to your team immediately. I have extensive experience in team leadership and safeguarding a company's sensitive data and assets.

I know the cybersecurity fundamentals your company requires of its analysts as demonstrated by earning the CompTIA IT Fundamentals+, A+, Network+, and Security+ certifications. I have hands-on experience with the tools and technologies used in Security Operations Centers to monitor alerts, evaluate network, application, and endpoint security, perform in-depth analyses using OSINT resources, and document incidents using incident reporting systems.

My real strengths are that I am highly organized, detail-oriented, and passionate about cybersecurity. What I am looking for is an opportunity to use my guest service experience, my ability to learn quickly, and my passion for cybersecurity at a company like yours to help you meet any challenges that arise now and in the future. 

I like reading good books from a variety of genres, though I love science fiction the best. I use crossword puzzles as a great method for both relaxing and keeping my mind sharp. Living in Las Vegas allows me to indulge in a little casual poker playing every now and then as well as attend shows by world-class entertainers. Taking a nice, long walk in the morning or evening is something I do to either start or end the day well.

Please feel free to reach me at michael.liebert13@gmail.com.

Michael Liebert, CIOS CSIS

Centene Corporation

As a member of the Threat Vulnerability Management Team, extensive daily Tenable.sc and Tenable.io administration and implementation manager while working with an remote energetic team. Partnership with a strong two member automation team to leverage scripting for repeatable efforts which then allows us to focus on higher priority actionable items. Monitor and audit 27 major scans for uncovered address spaces and scan zone gap analysis to meet authentication goals set by overall manager. Interface with enterprise-wide teams to create the strongest network possible with overlapping tools for gap coverage.

As Project Lead for a six month Statement of Work (SOW), managed a four-member team to update over 64 CIS Benchmark Audit files. This effort included building audit files from scratch, editing audit file to capture deviations set by the Security Architecture team, testing the audit file in the non-prod and development environment for twelve operating systems and 50+ applications. This was a successful effort due to the strong work ethic, and attention to details the APEX team provided everyday.

Service Now (SNOW) experience with Normal and Standard change process. Monitor CVITS and VITS for enterprise remediation efforts. 

Prisma Cloud Access Control Manager for users and containers ensuring appropriate permissions are monitored.

Leverage Armis Centrix to complement Tenable One vulnerability analysis and create dashlets to help identify gaps in IP coverage across four major datacenters. 

Currently a mentor for the CENTENE CyberUp Program with Veterans selected as interns on our team. Daily mentoring includes creating goals to integrate with the team, independent study and assignments, and troubleshooting actual events to develop solid troubleshooting procedures.

Infrastructure Engineer II

AUSGAR Technologies INC

July 2019 - Present, Cybersecurity Engineer III, AUSGAR Technologies, San Diego, California
Provides Command Cyber Operational Readiness Inspection (CCORI) criteria, focuses on providing combatant commands and federal agencies with a greater understanding of the operational risk their missions face because of their cybersecurity posture. Assesses and monitors DODIN enterprises for readiness and security, trains users, and monitors compliance assessments through site visits and assessed the function of vulnerability scanning utilizing DoD compliance-based criterion. Conducts Cyber Operational Readiness assessments, as well as the function of mission analysis utilizing operational risk criterion. Assists in audits and Access Control inspections, analyzes inspection artifacts, and provides recommendations for improvements to maturity, efficiency, and effectiveness of DODIN cybersecurity service capabilities.

•	Cybersecurity Compliance Readiness Assessment 
•	Cybersecurity Threat Detection and Analysis
•	Task order (TASKORD) Management

Cybersecurity Engineer III

Consolidated Afloat Networks and Enterprise Services (CANES) Cybersecurity 
Performs privileged system administration on specialized cyber defense applications including Tenable.sc and systems to include installation, configuration, maintenance, backup and restoration. Skilled in system, network, and OS hardening techniques. Knowledge of cyber defense policies, procedures, and regulations. Assesses and monitors cybersecurity related to system implementation and testing practices. Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may impact the enterprise. Maintains cyber defense audit toolkit and systems such as Assured Compliance Assessment Solution (ACAS) to support cyber defense audit missions. Maintains knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing. Extensive knowledge and technical comprehension of Tenable products, reports, and dashboards.

    • Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, 
       effects on system and information. Designs and implements custom dashboards to ensure 
       accurate data and reporting 
    • Characterize and analyze network traffic to identify anomalous activity and potential threats to 
       network resources. Identify applications and operating systems of a network device based on 
       network traffic.
    • Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous 
       activities, and misuse activities and distinguish these incidents and events from benign activities.
    • Conducts interactive training exercises to create an effective learning environment for new 
      team members

Trident Warrior Certification and Accreditation (now RMF) Systems Engineer
Performed an ISSE role and developed test plans to address specifications and requirements and make recommendations based on test results to achieve an Interim Authorization to Test (IATT). Validated, evaluated, and verify hardware and/or software to determine compliance with defined specifications and requirements. Created auditable evidence of security measures. Skilled in conducting test events and ability to collect, verify, and validate test data for accreditation. 

    •	Extensive knowledge of System Technical Implementation Guides (STIGs)
    •	Assisted system and application owners in understanding remediation or mitigation strategies
    •	Familiar with the RMF Process Guide (RPG) and security controls

Information System Security Engineer

Mission Architecture & Information Systems Security Manager
Performed a research and program management role by conducting technology and/or feasibility research, development, and assessments to facilitate innovation. Collaborated with stakeholders to identify and/or develop solutions technology to follow software and systems engineering life cycle standards and processes. Researched current technology to understand capabilities of required system or network to troubleshoot prototype design and process issues throughout the product design, development, and pre-launch phases. Leveraged extensive shipboard communication experience to help train team members with no prior military experience.

    •  	Extensive knowledge and comprehension of shipboard C4I systems
    •	Ability to produce technical documentation and briefings
    •	Understands and Integrates the interests of key internal and external stakeholders
    •	Designed and implemented an internal validation process to ensure deliverables early

Information Technology Specialist

Information System Security Officer/ Program Manager
As a program manager monitored the cybersecurity program for information system assets for the Navy Continuous Training Enterprise (NCTE) program.  Collaborated with stakeholders to establish the enterprise continuity of operations program, strategy, and mission assurance by ensuring assets were delivered on-time for test events. Provided end users tiered-level customer support by coordinating software, and hardware availability. Perform asset management/inventory of information technology (IT) resources by working directly with event planners and site leads at 54 nodes. Performed weekly cross-domain solution auditing compliance with zero discrepancies. Worked independently and remotely for duration of contract.

    •	Exceptional customer service prior to installations ensuring 100% exercise participation
    •	Working knowledge of the Information Assurance Workforce Improvement Program
    •	Provided a 1.6 million dollar savings by procuring underutilized  devices for a network upgrade

Program Manager

Every opportunity I have delivered exceptional results with integrity and accountability.  

taplio

The Battle

Michael Liebert, CIOS CSIS

J T

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?