09/06/2022 updated
DM
100 % available
SIEM Consultant, SIEM and Cloud Consultant, ArcSight Content Engineer
London, United Kingdom
United Kingdom
Cloud, data migration, big data, AWS Glue, Athena, Kenesis, Boto3, parquet data formats, AWS, Azure, AWS Lambda, Python, Powershell, SIEM, AWS Boto3, data analysis, cyber security, CEF Syslog, Folder-Follower, JSON, XML, Okta, API, XML authentication logs, Atlassian Crowd, Jira, VMWare, DNS, Filegateway services, Firepower, CloudWatch, ELB, Checkpoint, OPSEC, Oracle, MS-SQL, complex networks, data centres, SOX, penetration testing, Network Security, Unix
Languages
EnglishGood
Project history
AXA is one of the world’s leading providers of insurance and financial services.
- Currently engaged as Cloud Solution Architect and Technical Project Manager to lead the end to end delivery of a business-critical cloud data migration project to reduce costs of on-premise NAS storage.
- Develop high level designs, roadmaps, solution options and proof of concept big data system using AWS Glue, Athena, Kenesis, Boto3 and parquet data formats.
- Led solution proposals through global architecture review board processes, and validation of new AWS services for use throughout AXA Group
- Manage relationships with 3rd parties to facilitate technical delivery of strategic initiatives including a major Next Gen SOC project based on Azure Sentinel.
- AWS Lambda and Azure cross-cloud Python and Powershell function development.
- Onboarding and integration of AXA operating companies to ArcSight SIEM.
DXC Technology is the world's leading end-to-end IT services and solutions company.
* Engaged as SIEM Consultant to lead the onboarding of applications and platforms into managers
servers for a major client - Vodafone. This involved configuring, running and deploying AWS
GuardDuty monitoring system and using Python and AWS Boto3 to extract and transform data
presentation with the aim of enhancing MI reporting capability.
* Developed and implemented customer use cases into SIEM policies, logged event information
including filters, active lists and dashboard, managed risks and developed ArcSight Flex
Connector solutions.
* Oversaw and coordinated data analysis activities and built Python toolsets to assess data spikes.
* Led the successful onboarding of the world's largest internet AS backbones into the managed SIEM
service and onboarded application log sources to ArcSight.
* Engaged as SIEM Consultant to lead the onboarding of applications and platforms into managers
servers for a major client - Vodafone. This involved configuring, running and deploying AWS
GuardDuty monitoring system and using Python and AWS Boto3 to extract and transform data
presentation with the aim of enhancing MI reporting capability.
* Developed and implemented customer use cases into SIEM policies, logged event information
including filters, active lists and dashboard, managed risks and developed ArcSight Flex
Connector solutions.
* Oversaw and coordinated data analysis activities and built Python toolsets to assess data spikes.
* Led the successful onboarding of the world's largest internet AS backbones into the managed SIEM
service and onboarded application log sources to ArcSight.
ITC Secure Networking provides cyber security solutions to organisations in over 180 countries.
* Engaged as SIEM and Cloud Consultant to provide technical integration insights and
recommendations to clients including YouView, Schroders and BAT.
* Conducted detailed AWS security and compliance assessment for YouView in line with AWS
Well-Architected, Security Best Practices and Cloud Adoption frameworks.
* Managed development of flex connectors including CEF Syslog, Folder-Follower, JSON and XML.
* Designed and developed system architecture and design solutions to support business requirements
in line with ongoing, business-critical transformation activities.
* Delivered ArcSight Flex Connector solutions to integrate application log sources including Okta,
API, XML authentication logs, Atlassian Crowd, Jira, VMWare, DNS, Filegateway services, Firepower
and AV.
* Led delivery of the company's greenfield SIEM Cloud deployment involving integrating AWS
CloudTrail, CloudWatch, GuardDuty and ELB / ALB log sources using Python, Boto3, and ArcSight
flex connectors.
* Developed and introduced an Ansible toolset within the managed SIEM operations infrastructure.
* Created detailed user guides and manuals for processes, systems and procedures to ensure
compliance.
* Led the response to a major security incident at Coca-Cola European Partners caused by failure of
an internal system due to a domain name being registered by external party. This involved
analysing circumstance of domain transfer, providing incident report and aiding domain recovery.
* Engaged as SIEM and Cloud Consultant to provide technical integration insights and
recommendations to clients including YouView, Schroders and BAT.
* Conducted detailed AWS security and compliance assessment for YouView in line with AWS
Well-Architected, Security Best Practices and Cloud Adoption frameworks.
* Managed development of flex connectors including CEF Syslog, Folder-Follower, JSON and XML.
* Designed and developed system architecture and design solutions to support business requirements
in line with ongoing, business-critical transformation activities.
* Delivered ArcSight Flex Connector solutions to integrate application log sources including Okta,
API, XML authentication logs, Atlassian Crowd, Jira, VMWare, DNS, Filegateway services, Firepower
and AV.
* Led delivery of the company's greenfield SIEM Cloud deployment involving integrating AWS
CloudTrail, CloudWatch, GuardDuty and ELB / ALB log sources using Python, Boto3, and ArcSight
flex connectors.
* Developed and introduced an Ansible toolset within the managed SIEM operations infrastructure.
* Created detailed user guides and manuals for processes, systems and procedures to ensure
compliance.
* Led the response to a major security incident at Coca-Cola European Partners caused by failure of
an internal system due to a domain name being registered by external party. This involved
analysing circumstance of domain transfer, providing incident report and aiding domain recovery.