Toyota Tsusho Systems US, Inc.

￭ Conduct thorough vulnerability assessments by integrating data from multiple sources and correlating findings to provide actionable insights
￭ Continuously monitor security intelligence feeds and research emerging threats for proactive identification of vulnerabilities
￭ Evaluate the potential impact of vulnerabilities on critical infrastructure, advising on effective remediation strategies to mitigate risks
￭ Spearhead and enforce robust patch and vulnerability management strategies to safeguard critical systems and data, mitigating potential exploitation risks and ensuring continuous security compliance
￭ Oversee the end-to-end vulnerability remediation lifecycle, collaborating with stakeholders and managing tasks through ticketing systems for streamlined execution
￭ Leverage trusted resources to investigate active vulnerabilities and exploits, ensuring timely response and mitigation
￭ Develop detailed remediation procedures for application and system owners, ensuring proper implementation and resolution
￭ Prepare and present technical reports, including executive summaries and trend analyses, to inform stakeholders of security findings and recommendations
￭ Collaborate with system engineering teams to configure and deploy vulnerability scanning and network assessment tools, enhancing security infrastructure
￭ Provide key support to the Incident Detection and Response team by actively participating in daily security operations, incident triage, and threat mitigation efforts
￭ Execute vulnerability scans, ensuring systems meet security standards and compliance requirements
￭ Engage with external researchers and organizations to manage responsible disclosure and coordinate vulnerability resolution
￭ Implement and optimize automated tools for efficient vulnerability management, working closely with cross-functional teams
￭ Ensure continuous security posture improvements through coordinated patching and scanning activities with relevant teams

Vulnerability Management Engineer | Cybersecurity Engineering, Cyber Protection

CommonSpirit Health Mountain Region

￭ Threat & Vulnerability Management – Identifying, Classifying, Prioritizing, Remediating, and Mitigating vulnerabilities in systems and the software that runs on them
￭ Security Remediation – Analyze, Escalate, and Assist in remediation of critical Information Security Vulnerability scan findings and Incidents
￭ Participate in building and maintaining remediation plans to IT teams based on vulnerability and policy compliance scans
￭ Configuration Management – Design, Configure, Implement, Support and Maintenance of Active Directory Group Policy issues that impact the Windows OS & creating/setting baseline policies per Microsoft's recommended standards and best practices
￭ Implements internal policies/standards and CIS benchmarks to define, manage, and measure security configuration baselines
￭ Server Engineering & Operations – Support and Maintenance of Active Directory, Group Policy, DHCP, DNS and DFS
￭ Builds and maintains secure Windows Servers, working closely with the Information Security/Cybersecurity, Application Development, and Product Owner teams
￭ Active Directory maintenance, design, and optimization including group policy changes & audits, OU cleanup & optimization, and functional upgrades
￭ VMware Virtualization (vCenter, vSphere, ESXi, Horizon): Day-to-Day Operations (Configuration, Support, Maintenance/Management and Performance Monitoring)
￭ Windows Server 2012/Windows Server 2012 R2 Replacement/Migration Project
￭ VMware Carbon Black Protect Upgrade Project

Senior Systems Engineer | Enterprise Architecture & Solutions

CarMax

￭ Leads and drives remediation efforts within systems and security environments to increase the efficiency of CarMax and Cybersecurity vulnerability management processes 
￭ Analyzes security issues, determines cause and impact, and identifies the corrective action needed to eliminate and prevent the event from happening in the future 
￭ Exhibits good understanding of vulnerability validation, re-production, remedy advice and vulnerability research skills
￭ Articulates impact and risk to CarMax IT and Technology Leadership with the proven ability to convey the urgency and need to remediate a vulnerability commensurate with the risk it presents to CarMax 
￭ Define and report program roadmap, status, development issues and success metrics 
￭ Actively engages with various internal stakeholders including IT, End User Computing, Information Security/Cybersecurity, GRC, Quality Assurance, Quality Engineering, Infrastructure Engineering & Operations teams (Network, Systems, Development), and other relevant teams in the organization to conduct holistic response management on identified vulnerabilities and the remediation efforts
￭ Analyzes data and creates executive reports and presentations for targeted audience

Senior Vulnerability Management Engineer (Advisory) | Cybersecurity, Vulnerability Management

Texas Capital

￭ Security Remediation – Analyze, Escalate, and Assist in remediation of critical Information Security Vulnerability scan findings and Incidents
￭ Participate in building and maintaining remediation plans to IT teams based on vulnerability and policy compliance scans
￭ Threat & Vulnerability Management – Identifying, Classifying, Prioritizing, Remediating, and Mitigating vulnerabilities in systems and the software that runs on them
￭ Articulates impact and risk to Texas Capital Bank IT and Technology Leadership with the proven ability to convey the urgency and need to remediate a vulnerability commensurate with the risk it presents to Texas Capital Bank
￭ Collaborate with Security and Solution Architects to provide Enterprise solutions
￭ Patch Management – using Microsoft SCCM/MECM to patch assets in Development, Test, and Production environments while ensuring quality and minimal impact
￭ Creating documentation to support patching and vulnerability functions
￭ Responsible for categorization of third-party application usage
￭ Follow trends in emerging cybersecurity threats to our environment
￭ Provide continual improvement of standards and procedures of existing processes
￭ Participate in monthly patching after hours, and on weekends, as needed
￭ Design, Configure, Implement, Support and Maintenance of Active Directory Group Policy issues that impact the Windows OS & creating/setting baseline policies per Microsoft's recommended standards and best practices
￭ Windows Server 2008/Windows Server 2008 R2 Replacement/Migration Project
￭ TLS Remediation Project
￭ Participate in the creation of KBs, SOPs, and other informational internal documentation

Senior Systems Engineer | Security Remediation & Patch and Vulnerability Management

￭ Server Engineering – Support and Maintenance of Active Directory, Group Policy, DHCP, DNS and DFS
￭ Support/Maintenance, Configuration, Administration and Day-to-Day Operations of Microsoft Exchange & Microsoft Office365 
￭ System Center Configuration Manager (SCCM): Software Deployments, Software Updates, and Windows Updates
￭ System Center Operations Manager (SCOM): Monitor health of Windows Server environment
￭ Physical and Virtual Server Support for 3 Data Centers as well as Branch Offices
￭ Support and Maintenance of Corporate & Remote Offices' File and Print Servers
￭ Support and Maintenance of Azure Cloud Infrastructure
￭ VMware Virtualization (vCenter, vSphere, ESXi): Day-to-Day Operations (Configuration, Support, Maintenance/Management and Performance Monitoring)
￭ Utilizing VMware vROps (vRealize Operations Manager) to administer, monitor, troubleshoot, and manage the health and capacity of the virtual environment
￭ Support daily Backup Operations, including on-demand Backups, Archiving, Restores, and Data Recovery
￭ Support and Maintenance of current systems, to architect solutions to resolve complicated support requests, and to direct, coordinate and prioritize support and deliverables that impact the Windows OS
￭ Participates in the on-call rotation monitoring systems and responding to alerts within the defined SLA
￭ Ensuring the availability of client/server applications, configuring new implementations, and developing processes and procedures for ongoing management of the server environment 
￭ Researched, Gathered Requirements, and collaborated with Site Reliability Engineers on POC applications for integration within the Enterprise and replacement of existing products and services 
￭ Authored KBs, SOPs, and other informational internal documentation
￭ Security Remediation – Analyze, Escalate, and Assist in remediation of critical Information Security Vulnerability scan findings and Incidents

Senior Systems Engineer | Enterprise Infrastructure Engineering & Security Remediation

Enterprise Infrastructure Engineering, Operations, Support & Maintenance

￭ Actively Job Seeking During COVID-19

Completed online training through www.Udemy.com for various Information Systems topics including: 
￭ Microsoft Azure Cloud Services
￭ Microsoft Azure Data Fundamentals
￭ Microsoft Azure Administrator
￭ Microsoft Azure Active Directory
￭ Microsoft Azure Security Technologies
￭ Microsoft Azure Intune Plan, Implement, and Manage
￭ Microsoft Security, Compliance, and Identity Fundamentals
￭ Microsoft Active Directory Users and Computers
￭ Microsoft Active Directory Group Policy Management

Information Systems and Technology Services Professional

Toyota North America

￭ Providing Design, Implementation, and Support services for Windows-based systems across the Enterprise, including Endpoint Management and monitoring systems
￭ Develop structures and architecture design strategies to satisfy client requirements and further develop service standardization/delivery of IT Service Management frameworks for Toyota Motor North America customers
￭ Monitor the activities of the Enterprise Architecture unit as well as other sub-units in the organization to ensure compliance to the overall project plan
￭ Collaborate with MECM/SCCM Engineers for Software Update Deployments, Image/OS Deployments, Deployments of other Configuration Management tools, and top-level support for Enterprise-Wide initiatives
￭ Work within a team environment to support current systems, to architect and design solutions, to resolve complicated support requests, and to direct, coordinate and prioritize support resource assignments and deliverables
￭ Design, Configure, Implement, Support and Maintenance of Active Directory Group Policy issues that impact the Windows OS
￭ Collaborate with Security and Solution Architects to provide Enterprise solutions
￭ Operations and maintenance application of security updates and quarterly patch management across all systems working closely with customers and internal Information Security teams for remediation
￭ Creating the roadmap and regulations guiding IT designs and implementation within a business organization
￭ Assist Business Managers and Product Owners in developing policies and guidelines regarding the design and implementation of IT within the Enterprise
￭ Working directly with key Stakeholders, Product Owners, Application Owners, and Customers in a Scrum Environment which is responsible for discovery, engineering, testing, release, support, and promotion of products
￭ Vulnerability remediation of Infrastructure elements working with customers and internal Information Security teams

Principal Windows Systems Engineer | Enterprise Technology Services, Client Infrastructure (ITx)

Concentra

￭ Responsible for all aspects of Exchange and Skype Administration including policy development and implementation
￭ Active Directory/Group Policies/DNS/Sites and Services: Developing, Configuring, Support and Maintenance
￭ Participate in the planning, installation, configuring, monitoring and deployment of Citrix application servers
￭ Microsoft Exchange & Office 365: Support, Maintenance, Configuration and Management
￭ Perform system wide updates and patching, server installations, and prescribed maintenance during approved maintenance windows
￭ Responsible for installing, configuring and managing all aspects of the VMware vSphere environment which include creating virtual servers/workstations, installing new ESXi hosts, datastore creation and maintenance, troubleshooting performance issues
￭ Cisco UCS: performance monitoring, management. support and maintenance
￭ Design, install, administer, and optimize Microsoft Windows servers and related components to achieve and maintain high performance of business applications
￭ Manage Infrastructure assets by maintaining system component inventory and related documentation as well as technical specifications information; oversee new and existing equipment, hardware and software upgrades; Interact with vendors, outsourcers and contractors to secure products and services
￭ Ensuring the availability of client/server applications, configuring new implementations, and developing processes and procedures for ongoing management of the server environment
￭ Serve on the on-call rotation responding to alerts within the defined SLA
￭ Participate in development of Windows/Exchange/Skype strategy, including technology standardization and modernization
￭ Ensure timely resolution of technical issues and ticket remediation by diagnosing software and hardware related problems
￭ Created SOPs, KBs and other informational documents that reduced call times by 30%, also reduced ticket escalation to Tier 2 and Tier 3 by 40%

Windows Systems Engineer | Enterprise Infrastructure Engineering & Operations

￭ Functioning and serving as a technical expert and participate in and oversee a variety of analytical and technical assignments that provide for problem diagnosis and solutions documentation, implementation, administration, support, and maintenance of a variety of hardware, software, and network products in an information technology infrastructure environment. Providing day to day operational support for existing infrastructure services and users of those services, and project based work leading to the development and deployment of new infrastructure services
￭ Support and maintenance of Executives and their immediate representatives: serving the CEO, CFO, COO, CIO, CISO, CMO and Senior Vice-President's offices, Board Members, also providing technical support for Executive Administration – which include desktop, laptop, and mobile device support; technical consulting/planning for current & future technologies; proactive product research; user education and training; security consulting; operations support (diagnostic and problem resolution; hardware and software acquisitions, upgrades and installations; back-ups; and server support, maintenance and troubleshooting.)
￭ SDLC (Software/System Development Life Cycle) Process – Requirements gathering and analysis, Design, Implementation, Testing, Deployment & Support and Maintenance, Process Improvement & Project Management
￭ Implementing Information Security standards enforced by the Office of Civil Rights (OCR) within the U.S. Department of Health and Human Services (HHS), following the HIPAA Security Rule to protect PHI and to provide reasonable safeguards to ensure the confidentiality, integrity, and availability of information by protecting those assets from unauthorized access, modification, destruction, or disclosure
￭ Using ITIL best practices for IT Service Management and Delivery of Service and Operations
￭ Using HPDM to create packages for system wide deployments
￭ Created KBs & SOPs for Internal Support

Senior Technical Analyst III | Enterprise Client Infrastructure

Mohawk Industries

￭ Company wide roll-outs and projects – focusing on project management, systems management and integration
￭ Level 3 & 4 desktop & network support issues
￭ Desktop Support of computers – Windows 7, Office 2007/2010/2013/365, Outlook – system configuration and support
￭ Support and Maintenance of SQL Server that runs Carousel Production Equipment
￭ Support of Windows Server 2008 & Windows Server 2012
￭ Support of Windows XP/7/8 – functionality of hardware and software compatibility
￭ Software/Application Upgrades – projects, rollouts within the Distribution Center and Corporate Rollouts
￭ QA – Functional Testing of software compatibility with new releases of applications and service packs
￭ QA – creating defects with workflow procedures for Development Teams to test more in depth for problem resolution
￭ QA – hardware testing with iPads, and other electronic equipment to ensure functionality with 3rd Party software compliance
￭ Writing KBs & SOPs – creating procedural instructions for associates and remote clients/personnel
￭ Requirements gathering in an Agile environment
￭ Analysis to identify where process can be improved; either on the production side or systems/technical side
￭ Meet with different vendors and departments to see what the exact process will be, from both my position’s vantage point as well as that of my group’s
￭ Support of RF Equipment – ensure functionality with RDTs, Keyboards and Scan Guns (Intermec production equipment) that is mounted on the forklifts so associates are receiving the correct orders and production is running correctly
￭ Support of 3 million square foot production distribution center, on-site Systems Analyst that ensures functionality of all electronic and production equipment is running correctly

Systems Analyst II | Warehouse Management Systems

Aprima Medical Software, Inc.

￭ Supporting Microsoft Windows, Office 2007/2010, Outlook (Configuration/Support/Maintenance)
￭ Inuvio ICS Card Scanner – support of Drivers License and Insurance Card hardware/software
￭ Document Linking application support of Fujitsu FI6010-N and N1800 scanners
￭ Aprima EMR/PM/RCM software installation and software support of daily functionality from check-in to check-out process 
￭ SQL Server installation
￭ Analyzing database backup error messages and supporting customers by ensuring backups are run successfully
￭ Database migrations, migrating databases when converting or upgrading application to current or new release
￭ Database queries – applying hotfixes by running queries and making sure DB schemas are current by Quality Assurance release standards
￭ Configuring/Optimizing SQL Server
￭ Analyzing Database files – ldf and mdf growth percentages
￭ Support of Windows Server 2008 R2
￭ Support of Internet Information Server, adding and configuring websites via IIS Manager
￭ Support of MS Windows XP/Vista/7/8 – functionality of hardware and software compatibility
￭ Software/Application Upgrades – using remote RDP utility to upgrade clients to new versions
￭ Creating standalone acting servers when configuring DEMO Databases for Sales Reps/Teams
￭ QA – Functional Testing of software compatibility with new releases of applications and service packs
￭ QA – creating defects with workflow procedures for Development Teams to test more in depth for problem resolution
￭ QA – hardware testing with medical device equipment - Midmark/Welch Allyn – Spot Vitals, Spirometer, and EKG 
￭ Technical Writing – creating procedural instructions for co-workers and remote client IT teams/personnel

Technical Analyst III | Enterprise Client Infrastructure

ZogoTech

￭ Finance/Accounting – Provided financial, administrative, and clerical services in order to ensure effective, efficient, and accurate financial and administrative operations
￭ Reconciliation Accounting – Provided bank reconciliation procedures that allowed balancing bank accounts with amounts recorded in accounting ledgers
￭ Providing corporate IT support and training to employees along with Executive support encompassing desktop, network, hardware, software, printers, and mobile phones
￭ Maintaining data of a proprietary ERP solution including updating and creating customers, vendors, and other relevant data
￭ Delivering training solutions to customers on Data Warehousing solutions via on site training, online media (video tutorials), and technical documents
￭ Documenting and refining business processes which lowered the learning curve on our Data Warehousing software and also shortened collection cycles
￭ Configuration/Re-Configuration of systems (laptops/desktops) for new and existing employees
￭ Maintenance of Virtual PBX System
￭ Maintenance of User Accounts (Active Directory) and Exchange (Outlook Accounts)
￭ Maintenance of company website, updates, etc.
￭ Video Editing – recorded webinars, edited videos, published to website for webinar replays
￭ Client Relationship – Resolved business relationship with clients by providing support and also negotiated pricing on future purchases

Business Systems Analyst | Enterprise Engineering, Operations & Support

An outcome-driven IT professional with over a decade of experience, focusing on systems/infrastructure engineering, threat detection & vulnerability management, and security remediation. Demonstrated success in leveraging critical thinking to effectively prioritize and address vulnerabilities, while aligning system configurations with industry-leading security standards. My approach prioritizes risk management to safeguard enterprise environments effectively and I am seeking to apply my extensive expertise to deliver strategic solutions that protect critical assets and support long-term security resilience.

Taplio

John Thomas's Linkedin Analytics

John Thomas

Want to drive more opportunities from LinkedIn?

Famous LinkedIn Creators to Check Out