Mark Lambert

About Mark Lambert

Cyber Defense @ MH | Digital Asset Investor | Hook \'Em🤘

Experience

1. Information Security

   Memorial Hermann Health System

   Aug 2025 — Present

   Operate within Memorial Hermann’s Cyber Defense team, driving end-to-end detection and response across enterprise endpoints, email gateways, and identity systems• Perform deep phishing analysis in Proofpoint, quarantining malicious payloads, dissecting header routes, and attributing campaigns through pattern recognition and IOC mapping• Own the full incident lifecycle — from triage and containment to remediation and closure — across alerts surfaced in CrowdStrike, SIEM (GS, CW), and Proofpoint• Investigate endpoint detections by correlating process lineage, network activity, and user context to confirm malicious behavior and eliminate false positives• Track authentication anomalies across DL, DD, MailHHMFA01, and VDI environments, flagging lockout clusters, brute-force sequences, and MFA fatigue attempts in real time• Quarantine or isolate compromised hosts via CrowdStrike containment workflows; coordinate cross-tool response to suppress threat propagation• Enrich detection data using cross-system correlation (AD logs, mail traces, network telemetry) to surface hidden relationships and enhance analyst confidence in alerts• Regularly tune detection logic, refine playbooks, and update response procedures to reduce MTTD/MTTR and increase overall SOC signal-to-noise precision• Communicate incident summaries and technical findings during live SOC syncs and debriefs, translating raw events into actionable defensive improvements