Kyle Ennenga
Details
ICT Information Systems Security
University of Denver
Bachelor of Arts - BA
Political Science & History (Double Major)
Metropolitan State University of Denver
Bachelor of Arts - BA
Ottawa University
Cybersecurity and Infrastructure Security Agency
Cybersecurity Specialist
2022 : 2022
PwC
Manager, Cyber Ops
I am the day-to-day operational lead of a fully-remote Security Operations Center (SOC), overseeing Tier 1 and Tier 2 Analysts (18 total) in a 24x7 environment. Oversee the analyst's security monitoring, investigations, response, and reporting of events, alerts, and incidents. Provide leadership in times of crisis, provide guidance for iterations or enhancements to standard operating procedure or day to day operations, juggle scheduling, provide Tier 3 consultative support and coaching for Tier 2 analysts, and produce a litany of management reporting. Lead the coordination, development, and management of a managed threat hunting capability. Lead weekly team meetings, lead change management functions, as well as ensure Service Level Agreement (SLA) compliance for multiple clients. Assist with triage of alerts and alarms initiated from SIEM, Endpoint, and ticketing or case management tools. Lead operations and reporting of monthly threat hunts. Provide consultative client-facing support as well as SIEM content, use case, and query development.
2020 : 2022
PwC
Senior Associate, Cyber Ops
I monitored, investigated, responded-to, and reported on security incidents and events pertaining to tens of thousands of endpoints across multiple domains at a 24x7 security operations center (SOC). Every day, I consulted with distributed team members about unique events as they arise. I triaged alerts and alarms initiated from SIEM, Endpoint, DLP, O365, and ticketing tools, and conducted initial threat intelligence research using open source tools like VirusTotal, DNSDumpster, IPVoid, Shodan, etc. In addition to this, I assisted the pentesting team by researching, writing, and providing contextualized reports to widely-dispersed internal IT teams. In my role, I'm always learning, and applying that knowledge almost immediately to help my team defend an important federal client.
2020 : 2020
TTEC
Information Security Associate Engineer (SOC)
In an operations management role, I worked with multiple divisions in support of delivering sound managed technology services for a wide variety of customers in varying regulated industries. Responsible for developing and deploying overarching business workflows, documentation, billing, resource planning, consultative service delivery, and interfacing with our clients regularly. Deliver weekly, monthly, and/or quarterly external business reviews. Provide consultative information security best practice recommendations for client environments. Helped lead a new division in the company to full ISO 9001 compliance and contributed in the successful passage of an external audit. Assisted with sales pipeline and Statement of Work (SOW) development.
In an engineer role, I was responsible for leading the response to security issues as they arise in client environments. Track security project deliverables within the FedRAMP and NIST 800-53 compliance frameworks for federal and commercial customers. Served in roundtable discussions for platform recommendations and secure best practices. Led disaster recovery tabletop exercises and security policy development for client environments.
2019 : 2020
Zivaro
Operations Manager & Cyber Security Engineer
Skills
Customer Service, cyber security, cybersecurity, Endpoint Security, Executive Engagement, Federal Government, Federal Programs, Government, IDS, Information Security, Information Technology, IPS, IT Project & Program Management, Leadership, Malware, Management, Microsoft Office, Networking, NIST, Phishing, PMP, Policy, Program Management, Project Management, Public Affairs, Public Policy, Public Relations, Risk Analysis, Risk Management, Software as a Service (SaaS), Software Development Life Cycle (SDLC), State Government, Strategic Communications, Strategic Planning, Vendor Management
About
I'm part news junkie, part technology geek working every day to better understand the evolving ins and outs of infosec tradecraft. My top skills are my resourcefulness, my drive to fit that final puzzle piece in the set, and applying my background in social science and international relations to help my team stay informed of the latest goings-on of Advanced Persistent Threats. I love learning, so I guess I picked the right career. I enjoy researching exploits and vulnerabilities and how attackers do their dirty work. I like writing reports and presenting findings (seriously), and contributing to a team's mission. I have experience managing people, projects, operations, and programs, as well as the ability to describe complex issues to a wide variety of stakeholders. I also am adept at embedding buzz words into LinkedIn profiles. Oh, and, I will always use the Oxford comma.