Gary Driggs

Information Security Engineer

Legacy Health

Jan 2018 - Sep 2025 (7 years 9 months)

Helped architect for cloud migration of Epic & other major applications, managed Proofpoint transition to Microsoft 365. Led incident response, threat analysis, forensics, ediscovery, used MITRE attack & NIST incident response frameworks. Dept SME for CrowdStrike suite for 25,000+ hosts; Falcon Prevent, Device Control, Firewall Management, Falcon Exposure Management, Falcon Discover, and Falcon LogScale & Next-Gen SIEM. Migrated enterprise logging from Splunk to CrowdStrike LogScale then from LogScale to NG-SIEM. Implemented CIS benchmarks for Linux, Windows, iOS & Android, and cloud security posture management. Led multiple internal & external compliance audits and twice annual pen tests and tabletop exercises. Documented and led third par

F

Security Administrator

FamilyCare, Inc

Jun 2015 - Jan 2018 (2 years 8 months)

Implemented CIS Critical Security Controls for HIPAA/HITECH regulatory frameworks. Onboarded a MSSP for 24/7 coverage, wrote incident response runbooks, primary admin for advanced endpoint protection, network segmentation, web application firewalls, & security awareness training. Primary admin for Proofpoint email security gateway, secure desktop and server OS baselines, data loss prevention, peripheral and application allow listing, intrusion prevention at the border & intrusion detection on the LAN, mobile device management, enterprise logging for SIEM ingestion & analysis. Wrangled Carbon Black EDR for all endpoints. Rolled out Okta for IAM & single sign-on for Salesforce, AWS, and a couple dozen other applications. Enhanced our Microsof

IT Security Analyst

Portland General Electric

Oct 2014 - May 2015 (8 months)

Daily SIEM, IPS, and other infosec appliance monitoring and maintenance. Incident response, malware analysis, vulnerability scanning, risk & security consulting. Project management, change mgmt, documentation, ES-ISAC threat intelparticipant. Led Qradar SIEM tuning project for department wide cleanup of logging and alerts. Led IAM cleanup project to integrate MS SQL and other application roles into PAM tool. Rewrote forensic analysis and incident response runbooks based on NIST guidelines.

N

Senior Security Analyst

NIKE, Inc.

Mar 2014 - Jul 2014 (5 months)

Maintained incident response, remediation, & change management for a 24/7 SOC. Mentored and trained junior analysts

B

Systems Administrator III

Bonneville Power Administration U.S. Dept of Energy

Jan 2013 - Mar 2014 (1 year 3 months)

Architected AD authentication for Solaris and Linux servers using Delinea fka Centrify. Began ongoing OS and app maintenance plus security auditing with Tripwire, Nessus, & Splunk for Oracle Exadata and ZFS storage appliances as well as all Solaris and Linux servers. Used DISA STIG secure configurations & NIST standards with all Unix systems

Server Security Administrator

Portland State University

Dec 2011 - Jan 2013 (1 year 2 months)

Retooled evidence management for data requested from general counsel. Designed and implemented vulnerability scanning for all data center assets. Forensic analysis and incident response lead for small IT team. Wrote executive summaries for vulnerability and remediation plans. Designed and deployed IDS and SIEM console for data center, edge, and other nets. Correlated security event data between IDS, system logs, and endpoint security apps. Rolled out DLP scanning for all student and staff file shares

I

Sr. Unix Systems Administrator

Integra Telecom, Inc

Dec 2010 - Dec 2011 (1 year 1 month)

Solaris, Linux, and AIX virtual and bare metal maintenance, OS patching, hardware upgrade for 100+ servers. Primary admin for Oracle Exadata database appliance and monitoring. Primary admin for Citrix Netscaler load balancers. Admin for NetApp SAN/NAS infrastructure, CA monitoring, CommVault backups, etc. Performance, I/O, and networking load testing and tuning for Oracle dNFS, NFSv3, and iSCSI on 10Gb ethernet storage backend for Solaris zones and VMware guests. On call rotation for after hours support

E

Unix Systems Administrator

Extensis

Mar 2004 - Dec 2010 (6 years 10 months)

Maintained VPN infrastructure between Portland, Seattle, NYC, and UK offices. Administered and upgraded Cisco LAN, firewalls, VPN, and WLAN gear. Maintained multiple J2EE and PHP based services for ecommerce, blog, fora, and misc web services. Managed f5 load balancing appliances, web servers, and J2EE application servers. Database administration for production and development Oracle, MySQL, and cloud based db instances. Established and enforced network security policies and procedures. Primary architect and consultant for web font product based on Amazon cloud services. Built VMware NAS array using Nexentastor OS on HP and Promise hardware

Solaris Systems Administrator

FedEx Office

Nov 2002 - Mar 2004 (1 year 5 months)

Contract work for online preflight production and test bed Oracle dbs on EMC array. Emergency and ongoing maintenance of Sun E3500 servers. Provided short notice availability for outage repair and off-hours projects

E

Unix Systems Administrator

Electric Lightwave, Inc.

Jun 1998 - Apr 2001 (2 years 11 months)

Maintained 70+ Solaris hosts for network management and IP services. Performed 7x24 on-call duties for internal and external customers. Specified pre-purchase server build requirements. Sr. admin on team that administered DNS, Usenet news, firewalls, network abuse. Installed OS manually or with JumpStart server, patched systems, managed backups and NetApp filer, created user accounts, misc. day-to-day tasks. Mentored junior System Administrators on team

About

Detail

Timeline

Résumé