John Dorobek

Team Lead Infosec Operations, Offsec @Thrive

Team lead for pentesting and vulnerability management. Perform penetration testing and preparedness for customers. Plan and execute vulnerability and compliance scans across customer infrastructures. Collaborate with infrastructure, networking and systems teams on security vulnerability remediation or patch management validation. Monitor and track security-related defects and resolutions. Triage request for security scans from infrastructure and application teams. Develop vulnerability scanning rules. Work with business management to enforce security and IT policies. Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks. Assess internal and external threats to clients’ security posture and recommend reasonable improvements to procedures and/or technologies to mitigate risks. Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancements. Provide support for directory, authentication, and provisioning services across Thrive clients, including Active Directory, MFA, LDAP, DUO, SSO, auto-provisioning, and related complex infrastructures. Works with security team to manage security devices and platforms, Cisco/Fortigate firewalls and EDR/IDS/IPS/SIEM platforms. Manage multiple security platforms for customers - investigate and perform forensic analysis of machines - respond to attacks and remediate findings. Automate ticketing for security platforms and integrate with Autotask and ServiceNow. Develop and maintain security checklists and baselines for servers and workstations and networking equipment. Manage Secureworks XDR platform. Manage CrowdStrike partner platform. Manage Qualys and Nucleus and Tenable.io and Tenable.SC platforms, along with Nessus Pro. Assist clients with compliance and regulatory requirements. Assist clients with adoption of NIST cybersecurity framework and CIS Benchmarks.