Horace Bledsoe

About Horace Bledsoe

Information Security Professional with over 19 years of experience. Committed to…

Experience

1. Sr Threat Ir Engineer

   Cushman & Wakefield

   Jan 2018 — Present

   Globally responsible for complex security architecture that includes: IPS, SIEM, Azure/Cloud App Security, O365 Security and Compliance Admin console, SEP, Mimecast, CrowdStrike, Zscaler, Symantec DLP, Multi-factor authentication (MFA), Qualys vulnerability scanning, Log aggregation and reporting within MS Power BI.*Globally lead CIRT teams – using a wide variety of tools to validate and mitigate threats.* Globally responsible for responding to threats of all information, networks, computer systems, and user logins, whether on-prem or within Azure cloud.* Develop toolkits and threat feeds from various sources (e.g. CVE, GitHub, etc.) to gain a complete “picture” to efficiently determine the severity of a potential threat.* Utilizing several different tools, both open source and commercial grade, to create use cases, progress CW’s policies, and enhance incident response playbooks.* Act as security lead for several large incidents that involved both internal and external legal counsel and the Federal Bureau of Investigation (FBI).* Greatly reduce the exposure to APTs saving the organization millions in fraudulent activities— down 95% YoY.* Execute analysis of email-based (Phishing attacks) threats to include understanding of email communications, platforms, headers, transactions, and identification of malicious tactics, techniques, and procedures.* Leverage fundamental understanding of Operating Systems (Windows, Unix/Linux, and OSX) in support of identifying security incidents and to have a proper overview of risk profile.* Write After-Action Reports on incidents to analyze patterns, techniques, and data to develop sector specific intelligence to better defend corporate and client assets.* Conduct ad-hoc/scheduled pentesting/vulnerability of critical applications to discover possible gaps through use threat model, source code review, application behavior analysis, and other security framework e.g. OWASP, OSSTMM, NIST publications.