Michael Lammerding
Cybersecurity Operations Manager @Republic National Distributing Company
Signup · Get unlimited contacts
WORK HISTORY
Cybersecurity Operations Manager @Republic National Distributing Company
Cybersecurity Operations Center - Coach and mentor analysts to triage cyber security alerts, perform initial investigations - Reporting system and team performance - Declare major cybersecurity incidents, align resources to initiate IR response Multiple MSSP Cybersecurity Programs - Maintain vendor contracts and relationships Security Information Event Management (SIEM)- Weekly detection engineering calls, adding rules to cover multiple use cases, tuning rules to reduce false positives - Ensure log source, cyber threat intelligence, and enrichment data health for SIEM integrations Vulnerability Management (VM)- Bimonthly VM calls - Monitor vulnerability scans for irregular performance and scope violations - Flow vulnerability scan data into risk assessment conversations for appropriate prioritization of mitigation/remediation actions User and Entity Behavioral Analysis (UEBA)- Bimonthly user behavior detection calls with UEBA teams - Ensure log source health for all integrations Internet & Dark Web Monitoring, External Attack Surface Management - Monthly cadence calls Vendor Cyber Risk - Third party risk management, annual assessment questionnaires & attestation reviews - Internet monitoring for breach indications Cybersecurity Strategy & Architecture - Review available telemetry & data sources for detection potential as environmental changes occur - Cyber security tool rationalization & architecture efficacy discussions driving desired outcomes Compliance - Maintain traceability matrix for alignment of policies, procedures, and proofs with NIST CSF - PCI self-assessment questionnaires (SAQs) Business Alignment & Enablement - Provide guidance and recommendations to cross-functional teams regarding security policies, procedures, and standards - Cadence calls with development & infrastructure team leaders to prepare change advisory, architecture board discussions - Perform acquisition security risk assessments with larger due diligence efforts
ABOUT MICHAEL LAMMERDING
Driving enterprise-wide security improvements through well-defined governance, security controls, zero trust architecture, robust processes, and continuously improving monitoring & automation systems. Outcome-focused, flexible, knowledgeable Infrastructure and Cybersecurity Director with decades of experience in enterprise computing, management, and operations. Heavily focused on secure business enablement through the design, implementation, and management of infrastructure and cybersecurity solutions. Runs cyber threat intelligence (CTI) program, consuming and distributing relevant current and developing threat intelligence to appropriate stakeholders. Runs vulnerability management program, creating attack surface profiles and providing server administrators / application developers with relevant risk management data. Infrastructure security expertise. Fingerprinting systems and applications through data network communication flows. Advanced network-based access controls through identity, application recognition, entity behavior, conditional criteria, and traditional TCP/IP parameters to achieve best case segmentation with given technologies. Architectural changes or technology forklifts to achieve true micro segmentation with additional controls. Identifying behavioral anomalies in performance data for cyber-security and IT operational concerns. Incident response planning, tabletops, and responses to indicators of potential compromise. Threat hunting when time allows but I really enjoy it. Oversees compliance through multi-framework control mappings and traceability matrix creation to ensure historical artifacts for policy, procedure, and proof are identified and readily available during audits and assessments. If you\'ve read this far, you can probably tell. I\'m terrible at self-promotion.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.