profilePage

Cisco Sourcefire Professional 
ArcsightESM 
FireEye Systems Engineer
Cyber Incident Response
SANS 501 enterprise defender 
SANS 504. GCIH (Incident Handler) Certified

- Lead Incident Response & Investigation
- Major Incident Investigations 
- Threat Analysis 
- Vulnerability Assessment 
- Advance Persistent Threats (APT) 
- Malware Analysis (Basic)
- Security Auditing 
- Estate Policy
- IDS/IPS Analysis and Management (sourcefire certified )
- SIEM (ArcSight) Analyst ESM certified analysts 
 
Highly skilled in the use and management of:
 - SOURCEfire
 - EPO
 - ArcSight
 - BlueCoat
 - Ironport
 - Clearswift
 - Quest InTrust/Change Auditor/Repository Viewer
 - Splunk
 - Snort
 - FireEye EX...

�ݺ�ߣ