Dalton Cole
Details
Texas State University
2012 : 2014
- Manage common threats and issues leading to security incidents, host forensics skills, including collecting and analyzing system artifacts (file system, memory, running processes, and network connections) to assess potential compromise e.g., common forms of malware, credential phishing, drive-by host compromises, internal data spillage events, and inadvertent data leaks
- Identify, document, and report security issues and concerns to IT Leadership
- Develop remediation plans and coordinate activities with other organizational departments
- Contribute to the continuous optimization of up-to-date technical solutions and processes, including analyzing vulnerability reports (Qualys or Nessus related data) and audit logs (Splunk, SUMO)
- Utilize Anti-spam/anti-malware, enterprise configuration and integrity management tools
- Utilize technical basics, including networking fundamentals, common application protocols, system architecture, and basics of software development
- Research and learn new technologies quickly, adapting existing knowledge and processes to investigate and resolve security issues
- Document and provide weekly security incident reports and metrics
2020 : Present
Procore Technologies
Senior Information Security Analyst
My mission in this role was to build out security across existing systems and into AWS to deploy a functioning SOC.
- AWS, Azure, and VMWare environments
- Managed/deployed CrowdStrike Falcon EDR solution
- Created procedures for incident response & SOC
- Managed/deployed Tenable's vulnerability management solution
- Created tooling with Python3 and Golang for L1 analysts
- Developed SOP's for SOC analysts
- Validated security/IT controls for security applications
- Integrated existing security solutions with AWS
- Managed/deployed Splunk as a SIEM solution
2019 : 2020
Resideo
Senior Security Operations Analyst
I was responsible for day to day security operations such as incident response and vulnerability management for our corporate security as well as product security.
- HIPAA, HITRUST, and SOC2 compliant cloud infrastructure
- VMWare, Azure, GCP, and AWS platforms
- Ubuntu, CentOS, RHEL, Windows 2008 and 2012 architecture
- Create, test, and implement network disaster recovery plans
- Performed risk assessments and validated security controls
- Answered client security questionnaires
- Recommended security enhancements and purchases
- Developed tooling for solutions with python
- Consulted for security product acquisition and implementation strategy
- Managed our incident response and vulnerability management solutions
2018 : 2019
ClearDATA - Secure. Healthcare. Cloud.
Information Security Engineer
I solved challenges presented by clients for their web architecture. I resolved technical issues escalated from level 1 engineers, and I built solutions for our enterprise clients.
- Shared and dedicated server environments
- Assisted in client growth and project success via ticketing system
- Debian architecture
- SMB, Premium, and Enterprise client support
- Monitored Apache and Nginx logs for heavy traffic and possible threats
- Resolved systemic and escalated issues via ticketing system
- Provided consultation for service configurations directly to clients
- Remedied compromised and/or malfunctioning client systems
- Managed system and application patching
- CMS troubleshooting
- Site development consultation
2016 : 2018
WP Engine
Systems Engineer 2
I was responsible for maintaining and building web server assets for clients. I cultivated a broad technical skillset in this role and was exposed to a large range of technologies and implementations.
- Shared and dedicated server environments
- CentOS, RHEL, Windows 2008 and 2012 architecture
- Resolved systemic issues escalated internally via ticket
- AV deployment and management
- Remedied TOS abuse cases
- Managed system patching
- Deployed and maintained full web server stacks
- Solved for architecture scalability
- Created standard operating procedures for L1 system administrators
2011 : 2016
Endurance International Group
Systems Administrator
Skills
amazon web services (aws), Analytical Skills, bash, Blue Team, Cloud Computing, Cloud Security, Communication, Cyber-security, Data Analysis, Disaster Recovery, DLP, Encryption, Event Management, git, Google Cloud Platform (GCP), Hardening, Identity & Access Management (IAM), IDS, Incident Response, Information Security, Information Security Engineering, Information Technology, Infrastructure Security, IPS, JSON, Linux, Malware Analysis, microsoft azure, mysql, networking, network security, NIST, Penetration Testing, Phishing, Problem Solving, python, Red Team, Security Information and Event Management (SIEM), Security Operations Center, SOAR, team management, VMware, Vulnerability Assessment, Web Hosting, windows server, wordpress, debian, centos, red hat linux, apache, nginx, javascript, html, php, css, scripting, software installation, joomla, magento, moodle, drupal, dns management, restoration, email management, system administration, memcached, varnish, arch linux, customer service, dovecot, exim, postfix, troubleshooting, virtual private network (vpn), google cloud platform, ubuntu, vmware esx, commvault, clamav, technical support
About
I'm passionate about technology and security.
I possess a broad technical background from my time in system administration, but I currently specialize in the operations and engineering of security solutions in AWS. I enjoy driving the development and deployment of enterprise security programs within organizations looking to mature their security posture.