Phillip Tarrant
451cc73864
All checks were successful
Build and Push Docker Image / build (push) Successful in 9s
402 lines
15 KiB
JSON
402 lines
15 KiB
JSON
{
|
|
"$schema": "https://raw.githubusercontent.com/jsonresume/resume-schema/v1.0.0/schema.json",
|
|
"basics": {
|
|
"name": "Phillip Tarrant",
|
|
"label": "Cybersecurity Director | Automation Leader",
|
|
"email": "ptarrant@gmail.com",
|
|
"phone": "(706) 294-6733",
|
|
"url": "https://www.linkedin.com/in/phillip-tarrant-cyber",
|
|
"summary": "Accomplished and analytical professional with 20+ years of experience in cybersecurity, server infrastructures, and data-center operations. Proven expertise in Cyber Operations, digital forensics, penetration testing, information system management, malware reversing, threat detection, and threat hunting with and without AI integration. Proactive leader with a proven record of managing multiple large teams and leading the charge to complete project goals. Managed MSSP operations for 50+ large business clients encompassing over 150,000 assets and 1 million+ users.",
|
|
"location": {
|
|
"city": "Morrison",
|
|
"region": "TN",
|
|
"countryCode": "US"
|
|
},
|
|
"profiles": [
|
|
{
|
|
"network": "LinkedIn",
|
|
"username": "phillip-tarrant-cyber",
|
|
"url": "https://www.linkedin.com/in/phillip-tarrant-cyber"
|
|
}
|
|
]
|
|
},
|
|
"work": [
|
|
{
|
|
"name": "Confidential",
|
|
"position": "Senior Information Security Consultant",
|
|
"location": "Remote",
|
|
"startDate": "2025-01",
|
|
"summary": "Contract consulting role providing cybersecurity leadership and technical expertise.",
|
|
"highlights": [
|
|
"Develop, design, and review risk assessments and vulnerability scans of client networks and systems",
|
|
"Developing and implementing robust security controls and countermeasures to mitigate identified risks",
|
|
"Designing and deploying secure architectures for cloud, on-premises, and hybrid environments",
|
|
"Providing guidance on compliance with industry regulations (HIPAA, PCI-DSS, GDPR, NIST 800-53)",
|
|
"Collaborating with clients to develop and implement incident response and disaster recovery plans",
|
|
"Conducting regular security audits and assessments to ensure ongoing compliance and security posture",
|
|
"Director role at MSSP restructuring SOC flow and training SOC Staff",
|
|
"Managed Vulnerability Management Program for one of the largest fintech client in the US using Qualys",
|
|
"Currently managing SOC operations for US Defense Space market supplier across multiple Microsoft tenants"
|
|
]
|
|
},
|
|
{
|
|
"name": "Compuquip Cybersecurity",
|
|
"position": "Director of Automation",
|
|
"location": "Doral, Florida",
|
|
"startDate": "2024-06",
|
|
"endDate": "2024-12",
|
|
"summary": "Lead the Automation Team to deliver the automation needs of the business.",
|
|
"highlights": [
|
|
"Spearheaded new automation processes and procedures including standup of new architecture and infrastructure",
|
|
"Drove and mentored the team in new Automation workflows using Python, AWS Lambda and SOAR technology",
|
|
"Developed custom AI processes to handle several key business needs using custom prompts and data",
|
|
"Built automation handling 3,500 tickets weekly with 47% closed without human involvement",
|
|
"Designed, programmed, and deployed AI tools, prompts, code, and logic for security automation"
|
|
]
|
|
},
|
|
{
|
|
"name": "Compuquip Cybersecurity",
|
|
"position": "SOC Director",
|
|
"location": "Doral, Florida",
|
|
"startDate": "2023-03",
|
|
"endDate": "2024-06",
|
|
"summary": "Directed Security Operations Center and Red Team operations for MSSP clients.",
|
|
"highlights": [
|
|
"Grew SOC client base from 16 to 52 customers over tenure with expansion of services",
|
|
"Improved SOC profitability from 18% to 52% margin (80% in one quarter) contributing to 15% annual net income growth",
|
|
"Directly managed team of 17 reports",
|
|
"Oversaw Red team / Offensive Security Teams and Managed Remediation Service projects",
|
|
"Managed DFIR engagements, MDR services, Proactive Vulnerability Scanning, Patching, and Pentesting",
|
|
"Maintained situational awareness reports for advanced threats (APT and FO incidents)",
|
|
"Part of leadership team with COO/CEO/CFO involved in quarterly strategic planning"
|
|
]
|
|
},
|
|
{
|
|
"name": "Compuquip Cybersecurity",
|
|
"position": "SOC Technical Manager",
|
|
"location": "Tampa, Florida",
|
|
"startDate": "2021-01",
|
|
"endDate": "2023-03",
|
|
"summary": "Managed SOC Operations and led incident research and engineering teams.",
|
|
"highlights": [
|
|
"Authored SOPs and training documentation for SOC team",
|
|
"Lead Incident Research and mentored SOC Engineers",
|
|
"Developed threat trend analysis reports and metrics",
|
|
"Managed SOC Operations and developed SOC playbooks/workflows",
|
|
"Generated end-of-month reports for managers and customers",
|
|
"Maintained situational awareness reports for advanced threats"
|
|
]
|
|
},
|
|
{
|
|
"name": "Travel Syndication Technology (TST)",
|
|
"position": "Sr. Cyber Security Architect",
|
|
"location": "Alpharetta, Georgia",
|
|
"startDate": "2020-04",
|
|
"endDate": "2021-01",
|
|
"summary": "Responsible for security architecture, training programs, and compliance across the organization.",
|
|
"highlights": [
|
|
"Formulated and oversaw phishing and developer security training programs",
|
|
"Developed and maintained cloud security protections and security posture",
|
|
"Created custom tools to automate attacks against infrastructure and design detections",
|
|
"Saved $10,000+ through effective vendor/supplier negotiations",
|
|
"Steered organization through PCI and NIST 800 series audits",
|
|
"Devised, created, and upgraded cybersecurity related policies and procedures",
|
|
"Designed and implemented automated security verification and attack programs"
|
|
]
|
|
},
|
|
{
|
|
"name": "Intercontinental Exchange",
|
|
"position": "Senior Cyber Security Engineer",
|
|
"location": "Marietta, Georgia",
|
|
"startDate": "2020-03",
|
|
"endDate": "2020-04",
|
|
"summary": "Part of the Architecture and Automation Team focused on security data flow and automation.",
|
|
"highlights": [
|
|
"Designed and maintained security data flow from network endpoints through aggregation, parsing, and storage",
|
|
"Created methods, processes, and algorithms to extract knowledge from structured/unstructured data",
|
|
"Designed custom tools to automate SOC triage and response activities",
|
|
"Incorporated security into infrastructure CI/CD pipelines including cloud technologies",
|
|
"Formulated vulnerability and threat hunting dashboard for tracking and mitigation"
|
|
]
|
|
},
|
|
{
|
|
"name": "Intercontinental Exchange",
|
|
"position": "Cyber Security Engineer",
|
|
"location": "Marietta, Georgia",
|
|
"startDate": "2018-08",
|
|
"endDate": "2020-03",
|
|
"summary": "Part of the Incident Response / Digital Forensics Team as lead investigator.",
|
|
"highlights": [
|
|
"Served as lead investigator on critical incidents with thorough investigations",
|
|
"Created extensive documentation on processes and procedures for the entire IR team",
|
|
"Served as leader in Malware Analysis in isolated sandboxed environments",
|
|
"Developed skills of junior agents including custom malware writing through training",
|
|
"Managed multi-server compromise investigations coordinating across three teams and time zones"
|
|
]
|
|
},
|
|
{
|
|
"name": "The National Wild Turkey Federation",
|
|
"position": "Technical Services Manager",
|
|
"location": "Edgefield, South Carolina",
|
|
"startDate": "2015-10",
|
|
"endDate": "2018-08",
|
|
"summary": "Managed IT team supporting 300+ staff members with focus on infrastructure and security.",
|
|
"highlights": [
|
|
"Managed team of technicians and developers facilitating 300+ staff members",
|
|
"Oversaw 8 direct reports with performance management responsibilities",
|
|
"Conducted vendor/supplier negotiations to minimize costs",
|
|
"Managed security of entire web presence including network and programming code",
|
|
"Efficiently managed doubling of server space and usage",
|
|
"Migrated 3rd party tools to in-house solutions saving $50,000+ yearly"
|
|
]
|
|
},
|
|
{
|
|
"name": "The National Wild Turkey Federation",
|
|
"position": "Network / Server Administrator",
|
|
"location": "Edgefield, South Carolina",
|
|
"startDate": "2015-01",
|
|
"endDate": "2015-10",
|
|
"summary": "Managed Windows and Linux server environments with focus on infrastructure and automation.",
|
|
"highlights": [
|
|
"Designed, managed, and monitored infrastructure systems (LANs, WANs, Security)",
|
|
"Developed and maintained process automation through scripting and programming",
|
|
"Administered servers, computers, printers, routers, switches, firewalls, and phones",
|
|
"Spearheaded performance tuning, hardware upgrades, and resource optimization"
|
|
]
|
|
},
|
|
{
|
|
"name": "Morgan Thermal Ceramics",
|
|
"position": "System Administrator",
|
|
"location": "Augusta, Georgia",
|
|
"startDate": "2014-10",
|
|
"endDate": "2014-12",
|
|
"summary": "Contract role managing network support and infrastructure upgrades.",
|
|
"highlights": [
|
|
"Managed network support and upgrades including fiber optic link installation",
|
|
"Served key role implementing 35 managed switches with several VLANs",
|
|
"Resolved major data outage in main switch room without assistance",
|
|
"Completed three-month contract in one month",
|
|
"Developed automated cloning system to minimize cost and speed deployment"
|
|
]
|
|
},
|
|
{
|
|
"name": "Briarwood Academy",
|
|
"position": "IT Coordinator / Network Administrator / System Administrator",
|
|
"location": "Warrenton, Georgia",
|
|
"startDate": "2006-08",
|
|
"endDate": "2014-04",
|
|
"summary": "Oversaw IT department budgets and deployment strategies for the school.",
|
|
"highlights": [
|
|
"Oversaw budgets and deployment strategies for entire IT department",
|
|
"Administered servers, desktop computers, printers, routers, switches, firewalls",
|
|
"Shifted all servers from physical to virtual to save space and minimize costs",
|
|
"Rolled out wireless for entire campus comprising several acres",
|
|
"Negotiated and delivered fiber link for the school free of charge",
|
|
"Managed Linux NAS storage solutions for 200+ workstations"
|
|
]
|
|
},
|
|
{
|
|
"name": "Pronet",
|
|
"position": "Computer Service Technician",
|
|
"location": "Georgia",
|
|
"startDate": "2005-05",
|
|
"endDate": "2006-08",
|
|
"summary": "IT expert for hire in block time situations and emergency disaster recovery."
|
|
},
|
|
{
|
|
"name": "Sitel Group",
|
|
"position": "Tier 3 Support",
|
|
"startDate": "1999-05",
|
|
"endDate": "2001-05",
|
|
"summary": "Assisted Tier 2 technicians with customer service issues and tested new developing technologies."
|
|
}
|
|
],
|
|
"education": [
|
|
{
|
|
"institution": "Virginia College",
|
|
"area": "Network Administration",
|
|
"studyType": "Associate",
|
|
"startDate": "2014",
|
|
"endDate": "2016",
|
|
"score": "4.0",
|
|
"courses": []
|
|
}
|
|
],
|
|
"certificates": [
|
|
{
|
|
"name": "GWAPT - Web Application Penetration Tester",
|
|
"issuer": "GIAC",
|
|
"date": "2020-01-01"
|
|
},
|
|
{
|
|
"name": "GCFA - Forensic Analyst",
|
|
"issuer": "GIAC",
|
|
"date": "2019-01-01"
|
|
},
|
|
{
|
|
"name": "GCIH - Incident Handler",
|
|
"issuer": "GIAC",
|
|
"date": "2018-01-01"
|
|
},
|
|
{
|
|
"name": "A+ Certification",
|
|
"issuer": "CompTIA",
|
|
"date": "2001-01-01"
|
|
}
|
|
],
|
|
"awards": [
|
|
{
|
|
"title": "Lethal Forensicator Coin Winner",
|
|
"awarder": "SANS/GIAC",
|
|
"date": "2019-01-01",
|
|
"summary": "SANS Challenge Coin for excellence in digital forensics"
|
|
}
|
|
],
|
|
"skills": [
|
|
{
|
|
"name": "Security Operations & SIEM",
|
|
"level": "Expert",
|
|
"keywords": [
|
|
"Splunk",
|
|
"ELK Stack",
|
|
"Microsoft Sentinel",
|
|
"Microsoft Defender",
|
|
"Sentinel One",
|
|
"Rapid7 IDR",
|
|
"Stellar Cyber"
|
|
]
|
|
},
|
|
{
|
|
"name": "SOAR Platforms",
|
|
"level": "Expert",
|
|
"keywords": [
|
|
"Swimlane",
|
|
"D3 SOAR",
|
|
"Torq",
|
|
"Playbook Development",
|
|
"Workflow Automation"
|
|
]
|
|
},
|
|
{
|
|
"name": "EDR & Threat Detection",
|
|
"level": "Expert",
|
|
"keywords": [
|
|
"Darktrace",
|
|
"Tanium",
|
|
"Vectra",
|
|
"FireEye",
|
|
"Sentinel One",
|
|
"Detection Engineering"
|
|
]
|
|
},
|
|
{
|
|
"name": "DFIR & Forensics",
|
|
"level": "Expert",
|
|
"keywords": [
|
|
"Volatility",
|
|
"Malware Analysis",
|
|
"Reverse Engineering",
|
|
"Incident Response",
|
|
"Evidence Collection",
|
|
"Multi-host Investigation"
|
|
]
|
|
},
|
|
{
|
|
"name": "Penetration Testing & Red Team",
|
|
"level": "Advanced",
|
|
"keywords": [
|
|
"Metasploit",
|
|
"Web Application Security",
|
|
"Attack Simulation",
|
|
"Red Team Oversight",
|
|
"Purple Team Testing",
|
|
"Vulnerability Assessment"
|
|
]
|
|
},
|
|
{
|
|
"name": "Cloud Platforms & Security",
|
|
"level": "Advanced",
|
|
"keywords": [
|
|
"AWS",
|
|
"Azure",
|
|
"Oracle Cloud",
|
|
"Lambda",
|
|
"EC2",
|
|
"Cloud Security Architecture",
|
|
"Hybrid Environments"
|
|
]
|
|
},
|
|
{
|
|
"name": "AI/ML & Automation",
|
|
"level": "Advanced",
|
|
"keywords": [
|
|
"AWS Bedrock",
|
|
"Large Language Models",
|
|
"RAG",
|
|
"Machine Learning",
|
|
"Python Automation",
|
|
"Custom Tool Development"
|
|
]
|
|
},
|
|
{
|
|
"name": "Programming & Scripting",
|
|
"level": "Advanced",
|
|
"keywords": [
|
|
"Python",
|
|
"PowerShell",
|
|
"Bash",
|
|
"SQL",
|
|
"YAML"
|
|
]
|
|
},
|
|
{
|
|
"name": "Infrastructure & Systems",
|
|
"level": "Expert",
|
|
"keywords": [
|
|
"Windows Server",
|
|
"Linux/UNIX",
|
|
"Active Directory",
|
|
"VMware",
|
|
"Docker",
|
|
"Kubernetes",
|
|
"Network Architecture"
|
|
]
|
|
},
|
|
{
|
|
"name": "Compliance & Frameworks",
|
|
"level": "Advanced",
|
|
"keywords": [
|
|
"NIST 800-53",
|
|
"PCI-DSS",
|
|
"HIPAA",
|
|
"GDPR",
|
|
"CIS Benchmarks",
|
|
"Security Audits"
|
|
]
|
|
},
|
|
{
|
|
"name": "Leadership & Management",
|
|
"level": "Expert",
|
|
"keywords": [
|
|
"Team Leadership (17+ reports)",
|
|
"MSSP Operations",
|
|
"Budget Management",
|
|
"Vendor Negotiations",
|
|
"Training Programs",
|
|
"Hiring & Mentorship"
|
|
]
|
|
}
|
|
],
|
|
"languages": [
|
|
{
|
|
"language": "English",
|
|
"fluency": "Native speaker"
|
|
}
|
|
],
|
|
"meta": {
|
|
"theme": "executive-slate",
|
|
"version": "v1.0.0",
|
|
"lastModified": "2025-12-08"
|
|
}
|
|
}
|