So your enterprise bought a new bright and shiny – now what? I bet their InfoSec practices are fine, right? We will discuss how to plan and execute on an integration from a defense perspective; due diligence, purchasing, and integrating into enterprise security engineering and defense practices along with migrating monitoring into your own SOC (or MSSP). This talk is also applicable to you just landed an InfoSec job at a company that is just starting their security program and wonder where to start.
Sara Leal is a Senior Manager in the Security Operations Center (SOC) which is responsible for protecting Walmart and acquisition networks from malicious activity. She currently has responsibility for the SIEM (Security Incident and Event Management) Engineering team and the SOC Data Analytics team. Sara currently holds the GCIA and GMON SANS certifications. In her free time, she enjoys spending time with her three children ages 22, 14, and 11 and she loves to travel.
Jason Morrow is responsible for leading real time threat defense for fortune 1, it's subsidiaries' and acquisitions' networks. The scope of his role also includes incident management automation, orchestration, active defense, and RE. He holds the PMP, GSEC, GISP, GCIH, GMON, Network+, A+, CISSP and former holder of CCNA and CCSP certifications. Jason has presented cyber defense tactics at multiple universities, InfoSec cons, and the National CyberSecurity Collegiate Defense Competition (NCCDC).