Michael Kemmerer

About Michael Kemmerer

I have 14+ years of experience with implementing security event collection systems…

Experience

1. Senior Security Service Engineer

   Microsoft

   Sep 2019 — Present

   Security Infrastructure Architecture: • Spearheaded design and implementation of the data transfer and enrichment portion of a novel, enterprise-scale, geo-redundant SIEM platform EPS, EPS peak) • Designed and implemented a multi-tiered message bus infrastructure to securely and reliably ship security relevant logs • Implemented a distributed, at-scale, real-time method to normalize and enrich numerous log types using Logstash – Windows event logs, Linux syslog, firewall logs, Zeek-formatted logs, etc • Engineered the creation and distribution of local, automatically updated, and curated data sources for Logstash-based enrichment – asset information, GeoIP, IoC matching • Architected a means to aggregate alerts using arbitrary, analyst-defined fields in alerts • Implemented a load-balanced, HTTPS ingestion mechanism for ingesting events from global assets • Partnered with external vendors to improve capabilities and security of their products Infrastructure Automation Engineering • Designed widely reusable IaaS deployment Azure ARM templates to rapidly deploy and preconfigure Linux and Windows VMs • Created Ansible playbooks to automatically install, configure, and update services used in the SIEM platform • Implemented security controls to ensure confidentiality, integrity, and availability of the SIEM platform (managed identities, Azure KeyVault, Logstash keystore, Kafka SASL/ACLs) • Centralized monitoring of metrics using Telegraf and App Insights to enable charting, alerting, and automated response through Azure Alerts and Automation Accounts • Planned and executed disaster recovery drills and infrastructure rebuild exercises

Education

• University of Maryland Baltimore County

  MS, Engineering Management - Cybersecurity

• Lehigh University

  BS, Electrical Engineering

Skills

• Security
• Apache Kafka
• Apache
• Network Security
• Computer Security
• Linux
• Powershell
• Troubleshooting
• Python
• Att&Ck
• Bash
• Networking
• Information Security Management
• Distributed Systems
• Vmware
• Virtualization
• Integration
• Logstash
• Mcafee Epo
• Microsoft Azure
• Network Architecture
• Nagios
• Technical Leadership
• Cloud Computing
• System Deployment
• Information Assurance
• Project Management
• Enterprise Architecture
• Testing
• System Architecture
• Storage
• Intrusion Detection
• Ansible
• Dod
• Full Stack Engineering
• Splunk
• Servers
• Elasticsearch
• Javascript
• Information Security