Engineer Security

Michael V Torquato

Senior Engineer - Network & Information Security

Verizon Security Operations Center

Objective / Education / Certifications / Clearances Objective

Engineer, Consultant, or Security Specialist position within the Network Security industry where a highly

motivated individual with superior skills will add value to the company as a whole. Proven ability to secure any size network, perform

exceptional security event data analysis, and provide outstanding security and technical support service. Fully knowledgeable and

demonstrated competence in many aspects of network/internet based security and device management. Education

Bachelor of Science, Indiana University of Pennsylvania (May 2004)

[Major] Management Information Systems

[Minor] Information Assurance (Cyber Security) - NSTISSI 4011 and 4013 Certificates awarded by the National Security Agency (NSA)

Certifications

SANS GIAC Certified Incident Handler (GCIH)

Juniper JNCIA-IDP

QualysGuard Certified Specialist

Security Clearances

DoD Top Secret Clearance

U.S. MINT Top Secret Clearance

Summary of Skills Operating Systems

Microsoft Windows (All), MS DOS

Linux Distributions

OpenBSD, FreeBSD, *nix

BackTrack, Auditor, Whoppix, Whax

Security Applications & Firewalls

Security Applications

ArcSight SIEM, GuardedNet neuSecure

TippingPoint IPS/SMS, Juniper IDP/NSM, Enterasys Dragon 5.x-7.x, SourceFire, Snort, ISS RealSecure SiteProtector (HIDs &

NIDs), Cisco IPS, Cisco HIDs, Cisco IDS, McAfee IPS, Intrusion, IntruVert IntruShield, NFR Sentivist, RSA SecurID Management

Advizor Visual Discovery, Netcat, L0phtCrack, QualysGuard, Nessus, NBTscan, nbaudit, pf, HT, Metasploit, John, Nikto,

Ethereal, Kismet, Cheops, etc.

Firewalls

CheckPoint NG and AI, Netscreen, Cisco PIX, Lucent Brick

Astaro Security Linux

Work Experience Work Experience

Verizon Business / NetSec / CyberTrust - Ashburn, VA

Senior Engineer - Network & Info Security (Global Tier III TAC & IDPS Teams)

September 2006 - Present

Duties:

Subject Matter Expert (SME) for multiple top ten Fortune Global 500 companies

Global Tier III Technical Assistance Center (TAC) advanced network security engineer

Global Tier III Intrusion Detection & Prevention Systems (IDPS) advanced device management engineer

Support all aspects of the global Security Operations Centers (government and commercial), providing assistance to all

analysts and management as needed

Assist TAC team members with SEM content management including building all content, channel and filter creation,

monitoring, and maintenance

Assist IDPS team members with all device management operations including signature updates, TOS upgrades, device

troubleshooting, overall health monitoring and maintenance to keep devices up-to-date and stable

Responsible for management and maintenance of sensor profiles, rule bases, and signature updates on multiple platforms to

accomodate each customer's strict security policies

Perform detailed packet and traffic analysis and statistical correlation of events

Provide security awareness and technical device troubleshooting training to all Tier I/II analysts

Investigate new/unknown anomalies and provide feedback to both customers and analysts

Provide technical and security expertise to high-level executives

Prepare specialized reports upon customer requests

Ensure entire systems/networks are operational including NIDs, HIDs, IPS, Firewalls, VPNs, SEM, Agents, Database and

Application Servers, Event Collectors, and periphery equipment

Verizon Business (NetSec) - Herndon, VA

Senior Specialist - Network & Info Security (Tier II Shift Lead & SME)

September 2005 September 2006

Duties:

Shift lead responsible for everything that occurs on my shift and accountable for shift mates

Subject Matter Expert (SME) for a top ten Fortune Global 500 company

SME responsible for all aspects fo customer's network security, policies, procedures, and overall operations

Monitor all customer's networks for malicious and/or suspicious traffic in real-time as well as performing detailed

historical analysis

Perform detailed packet and traffic analysis and statistical correlation of events

Execute Incident Handling processes/procedures per each customer's individual SLA

Frequently participate in large conference bridges to troubleshoot security and network related issues

Provide technical and security expertise to shift mates and lower level analysts

Network Security Technologies, Inc. (NetSec) - Herndon, VA

Security Analyst

February 2005 September 2005

Duties:

Monitor customer's networks for malicious/suspicious traffic in real-time

Perform historical analysis on multiple platforms for each customer

Execute Incident Handling processes/procedures per each customer's individual SLA

Create outstanding event tickets summarizing very detailed and accurate information from comprehensive investigations

Administer firewall rule changes upon customer's request

Monitor hourly device status reports to ensure each sensor is reporting current events to the SEM

Network Security Technologies, Inc. (NetSec) - Herndon, VA

Junior Security Analyst

September 2004 February 2005

Duties:

Monitor customer's networks for malicious/suspicious traffic in real-time as well as performing historical analysis on

multiple platforms

Perform preliminary packet and traffic analysis, escalating security events as needed

Aid in the Incident Handling process

Shadow experienced analysts to gain knowledge and understanding of core duties

Experience working in a 24x7x365 NSOC environment

Network Security Technologies, Inc. (NetSec) - Herndon, VA

Customer Service Analyst

May 2004 September 2004

Duties:

Tier I support for all customer inquiries via trouble tickets, email, and phone calls

Perform RSA system administration, issue new SecurID tokens, addition and deletion of user accounts, and troubleshooting

authentication errors

Create and maintain all documentation living within the Security Operations Center

Monitor hourly device status report to ensure all sensors are healthy and seeing current events

Learned to perform core CSA duties without error while cross-training with Tier II analysts to attain a Junior Analyst

position

References

References will be furnished upon request

Contact this candidate