CyberNow Labs

♦ Conducting log analysis on Splunk Enterprise Security and IBM QRadar SIEM solutions and providing recommendations to the technical teams via the Jira ticketing system.
♦ Monitoring and analyzing SIEM alerts through Splunk Enterprise Security and IBM QRadar and identifying security anomalies for investigation and remediation.
♦ Analyzing malicious incidents using SentinelOne and CrowdStrike EDR solutions, identifying indicators of compromise, and preparing incident reports on the impact and scope of these activities using IBM QRadar SOAR. 
♦ Conducting analysis activities to determine the legitimacy of files, domains, and emails using OSINT resources such as VirusTotal, AnyRun, CyberChef, HybridAnalysis, and MX Toolbox.
♦ Analyzing phishing incidents using Proofpoint Email Security and Protection and documenting incidents using IBM QRadar SOAR. 
♦ Familiarity with various tools such as Tenable Nessus, Revelstoke SOAR, and analyzing PCAP files using Wireshark.
♦ Familiarity with the fundamentals of network and information security, network technology and tools, identity and access management, risk management, and SANS Incident Response. 
♦ SOC Shift Team Lead providing leadership, training, motivation, and guidance to other analysts.

Security Operations Center Analyst

Avertium

♦	Monitoring, triaging, and analyzing alerts in several SIEMs including LogRhythm, AlienVault Central and Appliance, Microsoft Azure Sentinel, FortiSIEM, and Splunk Enterprise Security, and identifying security issues for investigation, troubleshooting, and remediation. 
♦	Ensure all tickets are handled and resolved and in compliance with SLAs (Service Level Agreements).
♦	Conducting log analysis on these alerts and providing recommendations to the technical teams via the ConnectWise ticketing system. Writing documentation and logging activities in a Shift Daily OneNote file.
♦	Monitored the health of multiple SIEMs, EDRs, and other systems. Escalate to Shift Leads and Engineers as needed.
♦	Interface with clients as needed via emails and telephone calls.

Cyber Security Analyst

Michael Liebert Training Company

♦	CyberNow Labs – Learning how to use the tools of the trade in an immersive, hands-on Security Operations Center utilizing both classroom sessions and shifts in the SOC.
♦	Professional Institute of Technology – CompTIA Security+ classes.
♦	CompTIA CertMaster Learn, Labs, and Practice – Self-study on all three of these platforms for all four of my CompTIA certifications.
♦	Mike Meyers Total Seminars – Self-study courses for the CompTIA A+, Network+, and Security+ exams.
♦	Professor Messer Videos - Self-study courses for the CompTIA A+, Network+, and Security+ exams.
♦	Building a Home Lab – Designed more as a Blue Team lab to use for LetsDefend, OSINT research, practicing Linux and Wireshark, and assessing my home network vulnerabilities.
♦	Online Training Platforms – Self-study via the LetsDefend, RangeForce, and TryHackMe gamified training platforms and studying as an (ISC)² candidate.
♦	Linux – Self-study of several Linux fundamentals course online through Udemy.
♦	Wireshark - – Self-study of several Wireshark fundamentals course online through Udemy.

Student - Cybersecurity

Wynn Las Vegas

♦ 	Provided exceptional customer service working at the only Forbes 5-Star rated casino resort in the world.
♦ 	 Protected company physical assets as well as sensitive information.
♦ 	 Protected customer confidential information.
♦ 	 Trained team members on cheating detection and prevention methods.

Casino Supervisor

Empress Casino Hammond Corporation

♦	Worked in an environment equivalent to that of a cybersecurity Security Operations Center.
♦	Began as a Surveillance Agent and was promoted to Surveillance Supervisor and Surveillance Manager. 
♦	Most important job duty also equivalent to that of a SOC: protecting all company assets. 
♦	Trained and motivated a small, dedicated team to develop the skills required to protect company assets.
♦	Conducted company-wide training/mentoring on new customer service initiative.

Casino Surveillance Manager

I am an accomplished guest service professional from the casino gaming industry that has transitioned to a career in cybersecurity. I am an intuitive learner that can pick things up quickly and make valuable contributions to your team immediately. I have extensive experience in team leadership and safeguarding a company's sensitive data and assets.

I know the cybersecurity fundamentals your company requires of its analysts as demonstrated by earning the CompTIA IT Fundamentals+, A+, Network+, and Security+ certifications. I have hands-on experience with the tools and technologies used in Security Operations Centers to monitor alerts, evaluate network, application, and endpoint security, perform in-depth analyses using OSINT resources, and document incidents using incident reporting systems.

My real strengths are that I am highly organized, detail-oriented, and passionate about cybersecurity. What I am looking for is an opportunity to use my guest service experience, my ability to learn quickly, and my passion for cybersecurity at a company like yours to help you meet any challenges that arise now and in the future. 

I like reading good books from a variety of genres, though I love science fiction the best. I use crossword puzzles as a great method for both relaxing and keeping my mind sharp. Living in Las Vegas allows me to indulge in a little casual poker playing every now and then as well as attend shows by world-class entertainers. Taking a nice, long walk in the morning or evening is something I do to either start or end the day well.

Please feel free to reach me at michael.liebert13@gmail.com.

Michael Liebert, CIOS CSIS

Whirlpool Corporation

Data Privacy Officer & Cyber Security Manager - Asia

PwC India

Assistant Manager

Wipro

•	Performing Internal ITGC Audits.
•	Perform IT audits basis MSA requirement, Organisation policies and applicable standards.
•	Identify and highlight gaps to respective teams for closure.
•	Report identified issues to Senior Management.
•	Follow up and validate closure.
•	Handle PCI DSS, ISAE 3402 and SOX 404 audits.
•	Support organization security and compliance activities.

IT GRC Consultant

Fiserv

•Part of GS India Security and Compliance Team
•ISMS Implementation and maintenance.
•Ensuring compliance to PCI DSS, SSAE 16, ISO 27001 and Corporate Audits.
•Conducting Internal PCI DSS and Quarterly internal audits aiming to identify gaps and timely remediation.
•Performing ODC audits as per client requirements.
•Conducting Risk Assessment and Business Impact Analysis.
•Implementation and testing of BCP plan.
•Coordination with various support functions in remediation of identified gaps.
•Running Security Awareness campaigns.
•Reviewing monthly Vulnerability Scans reports to ensure timely remediation of identified vulnerabilities.
•Implementation of new controls based on the organizational changes, framework updates and audit findings.
•Coordinating with External Auditors and facilitating external audits. 

     Additional Responsibilities

•Part of Enterprise Risk and Resilience Team
•Development of Client Assurance framework to provide consistent and timely response to Fiserv’s customers and clients’ vendor security questionnaires.
•Creation of repository of questions with enterprise, client, business unit, product and location specific details of security controls as implemented in the organization.
•Interacting with various ISOs and function heads across the globe.
•Creation of process documents, communication plans.

Senior Associate

Tata Consultancy Services

Client: Indian Government Organization
Project: Strong Authentication Solution
•Leading the complete design and delivery of Two Factor Authentication Solution.
•Designed Security Solution to provide Strong Authentication (Two Factor Authentication) 
•Designed High Level and Detailed design document in accordance with client requirements.
•Presented solution to the client.
•Activity involved creation of Use Cases and Test Cases.
•Defined various roles, policies and workflow processes.
•Integration of solution with other proposed and existing security solutions.
•Presently working on Implementation of RSA SecurID solution.
•Worked on development of Hardening Guidelines for windows desktop systems.

Systems Engineer

Client : UK Government
Project: Vulnerability Assessment and Penetration Testing
•Conducted Network and Application VAPT on client’s internet facing infrastructure,   applications and internal network and portal.
•Conducted network vulnerability scanning using Nessus.
•Performed manual testing using Nmap, Netcat, Openssl, and Metasploit auxiliary modules.
•Conducted Vulnerability Assessment & Penetration testing for Scheme website application and internal portals using HP WebInspect and WebScarab.
•Analyzed the results and involved in report preparation for the vulnerabilities discovered along with the appropriate recommendations and risk factors.

Assistant Systems Engineer

Client : US Based Financial Service Provider
Project: Security Operations Center (Vulnerability Management and Surveillance).
•Surveillance and analysis of incidents using SIEM Tool ArcSight ESM , nCircle IP360 and AirDefense using logs from various perimeter devices.
•Monitoring client network from the Information Security perspective using ArcSight ESM 4.0.
•Handling security incidents in real time.
•Finding out anomalies and taking preventive measures for external attacks.
•Monitoring and prevention of any sensitive data leakage from the network using Vontu 11.1.
•Performing BAU and on demand vulnerability scan on the network using nCircle IP 360.
•Preparing vulnerability and security related reports.
•Handling tickets through IBM ticketing tool ManageNow.
•Handling WebSense exceptions and analyzing WebSense logs time to time.
•Interacting with different vendors on different issues and working along with them to resolve those.
• Analyzing phishing and spam emails.

Information Security Analyst

Client : US Based Financial Service Provider
Project: Vendor Security Assessment
•Assessing third party vendor’s security posture and the level of security controls they have in place throughout their enterprise according to client’s security policy and requirements and help in decision making.
•Conducted vendor’s security assessment using Standard Information Gathering (SIG) reviews and Application Service Provider (ASP) reviews.
•Assessing controls present in vendor’s environment based on response to questionnaire and security documents and audit reports shared by vendors.
•Updating assessment findings on Archer and following up with vendor towards closure.

Threat Modelling of e-commerce web-application.
•Analysing architecture and workflow of the application to identify possible threats and risks using STRIDE and DREAD.
•Defining use and misuse case scenarios, entry/exit points and trust boundaries
•Developing Threat Model and Attack trees using Microsoft Threat Analysis and Modelling tool, and  using MS Visio. 
•Suggesting mitigation strategies for secure application development.

Internship at

Information Security and Privacy Professional with 12+ years of experience in various Information security fields. Primarily involved into ITGC Audit, Security and Compliance, Vendor Security Assessments, VAPT, Network and Application Security, Vulnerability Management and Threat Modelling. 
Have good experience leading cyber security and privacy implementation projects and team. My qualifications include Masters in Cyber Security and Engineering Degree in Computer Science; along with CISA, ISO 27001 Lead Auditor and ITILv3 certification; and detailed knowledge of various security tools, technologies and best practices. Also achieved Azure and Ali Cloud Certificates. I have also published one research paper titled “Secure Framework for Social Networks”.

taplio

The Battle

Michael Liebert, CIOS CSIS

Rishi Raj Srivastava

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?