About

Work Experience

• Systems Engineer ( SIEM Engineering / DevOps / Linux Administration ), 

  Jan, 2019 - Jan, 20191 day

  D͟e͟v͟e͟l͟o͟p͟m͟e͟n͟t͟ :
  • Created a build - test - release pipeline for a Security Operations Center Tool (SIEM)
  • Created a streaming ETL data pipeline that enriches a data point (eg. IP Address, Domain, Email Address and File hash) with threat intelligence information using Kafka, kSQL and Malware Information Sharing Platform (MISP)
  • Converted Infrastructure Documentation to Infrastructure as Code, using gitlab, ansible, terraform, docker and packer
  • CIS-CAT Benchmark tool - Docker-packaged ansible playbook that automatically applies (or audits) CIS Security Benchmarks to Ubuntu18.04 and RHEL7 systems.

  O͟p͟e͟r͟a͟t͟i͟o͟n͟s͟ :
  • Reduced infrastructure and licensing costs by migrating servers from VMWare Hypervisor to Proxmox Cluster
  • Managed a fleet of 60 to 110+ Linux Virtual Machines and containerized services
  • Implemented monitoring of Servers, containers and services using Prometheus, metrics exporters and Grafana
  • Implemented an automated backup and recovery procedure
  • Reduced idle resource consumption for auxilliary services (Nginx/HAProxy and DNS) by containerizing services
  • Implemented High-Availability mode and scalability for proxies and dns servers by containerisation
  • Implemented the use of ansible for configuration management

  S͟y͟s͟t͟e͟m͟s͟ ͟E͟n͟g͟i͟n͟e͟e͟r͟i͟n͟g͟ :
  • Built a DMARC monitoring and alerting platform using Open Source tools
  • Created integration plugins for oracleDB, also created live visualizations and reports in the context of database application monitoring.
  • Automated the threat intelligence hit enrichment for suricata Network IDS.
  • Created a SOC Case Management platform by integrating threat intelligence with elasticsearch SIEM and thehive project
  • Consulted for clients with on-going lift-and-shift projects to Amazon Web Services
  • Consulted for containerization strategies for clients that want to use AWS’ Elastic Container Service

• Information Security Engineer, 

  Oct, 2017 - Jan, 20191 year 3 months

  Technical Lead for Security Information and Event Management (SIEM) deployments.

  Projects:
  • Implementation and Deployment of GoPhish (Open-Source Phishing Framework)
  • Compromise Assessment of a Philippine-based Accounting Firm
  • Multi-Tenant SIEM for a Managed Security Service Provider (Security Operations Backend for Telecom Provider)
  • Private Cloud (VMWare) Security Information and Event Management System Deployment

• Information Security Analyst, 

  May, 2016 - Oct, 20171 year 5 months

  NetSec Administrator
  • Provides network support for users and data center
  • Performed Daily Monitoring of Spam Filters, Firewalls and Routers
  • Administration of In-House applications:
  ..........Huntsman Security Information and Event Management (SIEM)
  ..........Snort Intrusion Detection System (IDS)
  ..........Security Onion OpenSource Security Suite (IDS)
  ..........TrendMicro Anti-Virus (TMOS)
  ..........InterScan Messaging Security Appliance (IMVSA)
  ..........DeepSecurity (Server Security)
  • Performed in-house Wide Area Network (WAN), Local Area Network (LAN) and Datacenter (Rack and Stack) infrastructure support
  • Performed monitoring of VMWare ESX virtual server environment, specifically, vswitches.

  • Assisted in cable runs and terminations and setup of corporate wireless network

  • Technical Support Representative (After-Sales Support) for Security Projects

  • Pre-Sales Engineer for IT Security Products

Skills

Education