- Electronics (right now using Arduino's for a sudo "smart house")
- Planted Aquariums
- Playing Guitar
- Software development / programming
- Continuing education in cybersecurity
Benjamin White
Winthrop
Summary
Ben has a passion for all things technology and has been involved in computer science his whole life. Being able to bring this passion to security implementation for a business is a source of personal excitement. As a Cybersecurity Professional, Ben's job is to provide organizations with the tools they need to feel confident with overarching goals including: expansion, consolidation, acquisition or maintaining status-quo. Whether it’s developing organizational security policy or designing security architecture, Ben’s responsibility is to support and inform management about the latest cybersecurity trends. This empowers leadership to execute structural goals using safe, informed methods and practices.
Overview
5
5
years of professional experience
1
1
Certification
Work History
Project Manager
Self
10.2024 - Current
- Labor and general contractor duties renovating an old residential cape
- Projected completion: DEC 2025
Manager, Security Engineering
Thrive
07.2024 - 09.2024
- Lead a team of security engineers on dozens of client projects
- Maintained all Thrive security on-prem services
- Worked with 3rd parties to support off prem solutions
- Escalation point for all client side issues pertaining to security engineering
Senior Security Engineer, Team Lead
Thrive
05.2024 - 06.2024
- Built a new SIEM site in Canada
- Increased the value of SaaS alerts by offering a m365 vulnerability function
- Involved in high-level internal projects: service migration and mergers
- Lead a team that onboard Qualys, FortiEDR, Sentinel One, FortiSIEM, SaaS alerts
- Escalation point for project hurtles, client service, and front end SIEM issues
- SME for our SIEM platform. Troubleshoot FortiSIEM backend issues
- Training of junior security engineers and security deployment
- Gauge and implement new parsers and device support for our SIEM platform
Senior Security Engineer
Thrive
04.2023 - 04.2024
- Primary SME for our SIEM, SaaS and DNSFilter platforms
- Converted our SIEM's database to clickhouse to increase performance
- Setup a DR site for our US SIEM instance
- Trained junior security engineers on SIEM, SaaS Alerts, KB4 and Symbol
- Tier 3 escalation point for project hurdles and SOC
Security Engineer
Thrive
01.2023 - 04.2023
- Onboarded more than 50 clients into our SIEM product
- Worked project stakeholders to ensure log integrity from all sources
- Maintained SIEM infrastructure via updates
- Acted as a source of escalation for SOC analysts
Cyber Security Analyst
Thrive
10.2022 - 02.2023
- Processed and investigated alerts from our security platforms
- Worked with clients to remediate security issues and harden environments
- Worked on SIEM onboarding projects
- Troubleshooted numerous endpoint and collector problems
- Met with clients for monthly security meetings
Information Technology Intern
InterMed, P.A.
05.2021 - 09.2021
- Restructured and optimized on premises Active Directory structure
- Organized GPO to better conform to theories of least privilege
- Used PowerShell and python scripting to gather telemetry for compliance reporting
- Developed and wrote a BIA for each department including a DR plan
Education
Bachelor of Science - BS - Cybersecurity
University of Maine at Augusta
12.2021
Skills
- Managed SIEMaaS expert
- Security Policy Development
- Powershell, Python scripting and coding
- Linux (Rocky Linux especially)
- Fortinet Firewalls, EDR, SIEM
- Security Awareness Training (KnowBe4, Symbol)
- Working with customers and stakeholders
- Workforce training
- Project tracking
Accomplishments
- Upgraded the back end of a fortisiem system to use a clickhouse database which increased speed and redundancy. This project took over a year to plan and implement. It affected over 200 clients.
- Built security ticketing automation using FortiSOAR which made interpreting alerts by analysts for severity faster and more intuitive. The system collated security data from multiple services and sources.
- Lead a project team that implemented security services for over a hundred clients. Clients ranged in size from 5 users to over 1500 users
- Added a new service to our SIEM that allowed for performance monitoring of PCs and Mobile devices
Certification
- NCL Individual Competition Scouting Report (92nd Percentile, 6478 entries)
- NCL Team Competition Scouting Report (99th Percentile, 3910 teams)
Interests
Publicatioins
The Evolution of Database Inference Attacks
Transparent Data Encryption
Links to these publications are available on my linkedin profile
Timeline
Project Manager
Self
10.2024 - Current
Manager, Security Engineering
Thrive
07.2024 - 09.2024
Senior Security Engineer, Team Lead
Thrive
05.2024 - 06.2024
Senior Security Engineer
Thrive
04.2023 - 04.2024
Security Engineer
Thrive
01.2023 - 04.2023
Cyber Security Analyst
Thrive
10.2022 - 02.2023
Information Technology Intern
InterMed, P.A.
05.2021 - 09.2021
Bachelor of Science - BS - Cybersecurity
University of Maine at Augusta