CyberNow Labs

♦ Conducting log analysis on Splunk Enterprise Security and IBM QRadar SIEM solutions and providing recommendations to the technical teams via the Jira ticketing system.
♦ Monitoring and analyzing SIEM alerts through Splunk Enterprise Security and IBM QRadar and identifying security anomalies for investigation and remediation.
♦ Analyzing malicious incidents using SentinelOne and CrowdStrike EDR solutions, identifying indicators of compromise, and preparing incident reports on the impact and scope of these activities using IBM QRadar SOAR. 
♦ Conducting analysis activities to determine the legitimacy of files, domains, and emails using OSINT resources such as VirusTotal, AnyRun, CyberChef, HybridAnalysis, and MX Toolbox.
♦ Analyzing phishing incidents using Proofpoint Email Security and Protection and documenting incidents using IBM QRadar SOAR. 
♦ Familiarity with various tools such as Tenable Nessus, Revelstoke SOAR, and analyzing PCAP files using Wireshark.
♦ Familiarity with the fundamentals of network and information security, network technology and tools, identity and access management, risk management, and SANS Incident Response. 
♦ SOC Shift Team Lead providing leadership, training, motivation, and guidance to other analysts.

Security Operations Center Analyst

Avertium

♦	Monitoring, triaging, and analyzing alerts in several SIEMs including LogRhythm, AlienVault Central and Appliance, Microsoft Azure Sentinel, FortiSIEM, and Splunk Enterprise Security, and identifying security issues for investigation, troubleshooting, and remediation. 
♦	Ensure all tickets are handled and resolved and in compliance with SLAs (Service Level Agreements).
♦	Conducting log analysis on these alerts and providing recommendations to the technical teams via the ConnectWise ticketing system. Writing documentation and logging activities in a Shift Daily OneNote file.
♦	Monitored the health of multiple SIEMs, EDRs, and other systems. Escalate to Shift Leads and Engineers as needed.
♦	Interface with clients as needed via emails and telephone calls.

Cyber Security Analyst

Michael Liebert Training Company

♦	CyberNow Labs – Learning how to use the tools of the trade in an immersive, hands-on Security Operations Center utilizing both classroom sessions and shifts in the SOC.
♦	Professional Institute of Technology – CompTIA Security+ classes.
♦	CompTIA CertMaster Learn, Labs, and Practice – Self-study on all three of these platforms for all four of my CompTIA certifications.
♦	Mike Meyers Total Seminars – Self-study courses for the CompTIA A+, Network+, and Security+ exams.
♦	Professor Messer Videos - Self-study courses for the CompTIA A+, Network+, and Security+ exams.
♦	Building a Home Lab – Designed more as a Blue Team lab to use for LetsDefend, OSINT research, practicing Linux and Wireshark, and assessing my home network vulnerabilities.
♦	Online Training Platforms – Self-study via the LetsDefend, RangeForce, and TryHackMe gamified training platforms and studying as an (ISC)² candidate.
♦	Linux – Self-study of several Linux fundamentals course online through Udemy.
♦	Wireshark - – Self-study of several Wireshark fundamentals course online through Udemy.

Student - Cybersecurity

Wynn Las Vegas

♦ 	Provided exceptional customer service working at the only Forbes 5-Star rated casino resort in the world.
♦ 	 Protected company physical assets as well as sensitive information.
♦ 	 Protected customer confidential information.
♦ 	 Trained team members on cheating detection and prevention methods.

Casino Supervisor

Empress Casino Hammond Corporation

♦	Worked in an environment equivalent to that of a cybersecurity Security Operations Center.
♦	Began as a Surveillance Agent and was promoted to Surveillance Supervisor and Surveillance Manager. 
♦	Most important job duty also equivalent to that of a SOC: protecting all company assets. 
♦	Trained and motivated a small, dedicated team to develop the skills required to protect company assets.
♦	Conducted company-wide training/mentoring on new customer service initiative.

Casino Surveillance Manager

I am an accomplished guest service professional from the casino gaming industry that has transitioned to a career in cybersecurity. I am an intuitive learner that can pick things up quickly and make valuable contributions to your team immediately. I have extensive experience in team leadership and safeguarding a company's sensitive data and assets.

I know the cybersecurity fundamentals your company requires of its analysts as demonstrated by earning the CompTIA IT Fundamentals+, A+, Network+, and Security+ certifications. I have hands-on experience with the tools and technologies used in Security Operations Centers to monitor alerts, evaluate network, application, and endpoint security, perform in-depth analyses using OSINT resources, and document incidents using incident reporting systems.

My real strengths are that I am highly organized, detail-oriented, and passionate about cybersecurity. What I am looking for is an opportunity to use my guest service experience, my ability to learn quickly, and my passion for cybersecurity at a company like yours to help you meet any challenges that arise now and in the future. 

I like reading good books from a variety of genres, though I love science fiction the best. I use crossword puzzles as a great method for both relaxing and keeping my mind sharp. Living in Las Vegas allows me to indulge in a little casual poker playing every now and then as well as attend shows by world-class entertainers. Taking a nice, long walk in the morning or evening is something I do to either start or end the day well.

Please feel free to reach me at michael.liebert13@gmail.com.

Michael Liebert, CIOS CSIS

National Cyber Group

National Cyber Group offers cyber security workforce development and talent solutions by combining the forces of America’s most-known name in foundational IT certification training, Total Seminars, and the most disruptive hands-on cyber training program, CyberNow Labs, with new job placement and staffing solutions to attract, train and transmit thousands of career-seekers into entry-and-mid-level jobs as the nation’s ‘Elite Cybersecurity Corps.’

Skills: Workforce Development · Cybersecurity Incident Response · Analyst Development · Defend the Nation ·

Cyber Security Program Director / SOC Manager

Cybersecurity Program Director

• Currently, oversee the development of SOC analysts through an immersive real-world SOC environment
• Work to improve the SOC with cutting-edge tools and processes
• Development of SOC Operations schedules to maximize analyst growth in skills and abilities
• Developed and Manage SOC Shift Program for appropriate analyst coverage
• Work with instructors to maintain proper class coverage for analysts in training
• Creation of instructional materials for analyst learning to achieve objectives of SOC Analyst daily duties
• Maintain objectives of the analyst training program through adjustment and modification to the learning materials and process
• Lead, direct, and motivate Security Analysts to conduct their daily analyst activities of monitoring security tools, conducting investigations, documenting findings, making declarations, and suggesting remediation steps
• Manage SOC playbook creation, modification, and daily utilization during investigations
• Build relationships with firms focused on analyst placement to facilitate placement opportunities as they age out of the training program

SOC Manager
• Manage day-to-day operations of CyberNow Labs Security Operations Center
• Monitor and manage industry standard, enterprise-level, security tools for alerts
• Adjust and monitor the security posture of the environment to maintain a high level of protection for the CNL network
• Review investigation documentation from current analysts for completion and thorough inclusion of proper information for historical record-keeping, threat intelligence, and event correlation
• Follow up with interdepartmental communications and requests for action item completion
• Function as final escalation point for SOC Analysts' investigations
• Communicate daily with SOC Analysts on new threats, tool additions, SOC changes and or expectations

Cybersecurity Program Director/ SOC Manager

Raytheon Intelligence & Space

•	Monitor multiple client’s environments simultaneously in an MSSP setting through analysis and use of a variety of security tools. 
•	Utilize client SLA’s for proper incident/alert handling, communication, documentation, escalation and remediation of security threats.
•	Conduct log analysis on RSA NetWitness, IBM QRadar, and Splunk Enterprise Security to provide recommendations via Service Now ticketing system.
•	Complete host based analysis using FireEye HX, CrowdStrike and Carbon Black Defense and Response. 
•	Identify potential IOC’s by analyzing malware to extract network connections, registry changes, and suspicious processes initiated during detonation. 
•	Recognize malware families with use of internal intelligence reports and security guidance information such as Mitre Att&ck framework.
•	Communicate with SOC team members for collaboration during investigation, tool outages and other related information sharing.
•	Support newer analysts with client access issues, environment awareness, tools and investigations.

Managed Security Operations Center Analyst

•Familiarity with fundamentals of information security including network technologies and tools, identity and access management, network security, implementing secure systems, and risk management.
•Conducted log analysis on IBM QRadar SIEM solutions and Splunk Enterprise Security and provided recommendations to the technical teams via The Hive ticketing system.
•Performed analysis to determine the legitimacy of files, domains, and emails using online resources such as IBM X-Force Exchange, VirusTotal, AnyRun, AbuseIPDB, and MX Toolbox.
•Analyzed PCAP files, narrowed down anomaly traffic with Wireshark, examined the details of the infected hosts, and wrote IOC on executive summary reports.
•Experienced in using various tools like Tenable Nessus, Kali Linux, and Metasploitable.
•Studied common cyber-attack types and created examples using tools such as Hydra in Kali Linux.
•Completed Host-based analysis using FireEye HX and Carbon Black.
Established a training program for Junior analysts and trained 11 analysts to bring them up to speed on policy, procedure, and tools.
•Lead implementation of SOAR technology into CNL SOC Stack with assistance of the Engineering team.
•Work with Engineering team to reduce noise in SOC tools
•Worked one on one with analysts to guide, coach, and direct activities of the SOC
•Lead Analyst workshops focused on building cybersecurity skills
•Conducted mock interviews with analysts in the SOC Analyst development program
•Review and guide analyst through resume creation, modification, and submittal

Cyber Security Operations Center Analyst / SOC Shift Lead Mentor

Colonial Life

•	Directed recruiting efforts for new agents in Virginia and Washington DC
•	Lead company in over-all recruiting volume. 
•	Implemented new processes and routines to guide entire state organization beyond expected goals.
•	Trained and developed managers to recruit for their individual organizations successfully. 
•	Set individual and manager stretch goals based on regional and company requirements.

Territory Recruiter 

Aflac

•	Business management role with a focus on building and developing a team to exceed district goals.
•	Recruited new potential agents through internet job postings and personal connections. 
•	Assisted new and existing agents in building successful business relationships to foster their growth within the company.
•	Facilitated weekly meetings to ensure district planning was in place and team cohesion was present.
•	Developed relationship with business owners and human resource staff to implement needed insurance benefits and then enroll their employees.

District Coordinator

I have the privilege of being the Cybersecurity Program Director / SOC Manager for an amazing organization, CyberNow Labs, a National Cyber Company. Together, with an amazing team of professionals, I am bringing my years of professional business experience, team leadership, and people development to help bridge the cyber security analyst workforce gap. I am excited to bring these skills along with my cybersecurity experience to those aspiring to join the cyber community. 

Managing the development of SOC analysts through an immersive hands-on program, designed by CyberNow Labs, is unmatched in the industry. Be Aware!! This is the most disruptive and intensive cyber security program designed to develop day one ready analysts!! Let's just say Real Network, Real Attacks, Real Analysts!!

Current Tool Box
IBM QRadar, Splunk, Splunk ES, SentinelOne, Crowdstrike, Proofpoint TAP, Proofpoint TRAP, Tenable Nessus, Netsparker, Revelstoke, Opmanager, Fortigate, Armis, Invicti, Acunetix, RSA Netwitness, Microsoft , Defender 365, Microsoft Defender for Endpoint, Fireeye HX, Fireeye MX, Fireeye EX, Kibana - Elastic, Sumo Logic, Carbon Black Response, Carbon Black Defense, Carbon Black Protect, Resilient, Jira, The Hive Ticketing, McAfee SIEM, ArcSight, Cylance Protect, SNOW - Service Now, Darktrace, Cisco Talos, Threat Connect, Extrahop Reveal(x)

Richard Chapman

Another day, another infrastructure outage!

Richard Chapman, CSAP

🚨 Major Cloudflare Outage – What You Need to Know

Cloudflare experienced a significant global outage today, causing widespread 500 errors, inaccessible websites, and disruptions across its dashboard and API. With Cloudflare powering security and performance for thousands of organizations worldwide, the impact was felt across Europe and beyond.

The outage affected multiple Cloudflare nodes and triggered a surge of reports from users unable to reach critical online services. While not all issues across platforms like Spotify, OpenAI, AWS, or Google are confirmed to be connected, the timing created substantial ripple effects across the internet.

The good news?

 Cloudflare is now seeing signs of recovery, with Access and WARP returning to normal operations in several regions. Work is still ongoing to fully restore application services.

Events like this highlight a critical lesson:
 🔐 Resilience and redundancy must be built into every layer of your infrastructure.

 Understanding how your dependencies behave during disruption is essential for maintaining uptime and protecting both operations and customers.

#Cloudflare #CyberSecurity #NetworkSecurity #IncidentResponse #InternetInfrastructure #ResilienceEngineering #SRE #DevOps #ZeroTrust #CloudSecurity #ITOperations #BusinessContinuity #SOC #CISO #CyberReadiness

taplio

The Battle

Michael Liebert, CIOS CSIS

Richard Chapman

Followers

Posts

Engagements

Likes

Performance ScoreRichard Chapman's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Michael Liebert, CIOS CSIS

Richard Chapman

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Richard Chapman's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreRichard Chapman's LinkedIn Performance