Tom Prescott

About Tom Prescott

10+ yrs in cyber security technical engineering & risk management. c••••••••@prescott.oneMy experience includes cyber security engineering, GRC compliance audit leadership, threat hunting, technical investigations, threat simulation, security architecture, vulnerability management & penetration testing.I can help you solve complex challenges, pro-actively discovering threats that bypass standard detection. I developed mature, scalable threat hunting, detection engineering & intelligence.I reduced dwell time threats 10-25%, prevented $4 mil in ransomware attacks.Security Tools Experience-CrowdStrike, Wiz, MS Defender 365+ATP, Red Canary, Tenable, Qualys, Tanium, Palo Alto Cortex, Rapid7, Cisco Threat Response, Proofpoint, InfoBlox, Joe Sandbox, Shodan, Palo XSOAR, Splunk/Elastic SIEM, Suricata, Zeek, Akamai, Imperva, Cisco StealthWatch, AttackIQ, Mandiant Validation, Kali Linux, Atomic RedTeam, Autopsy, NMAP, Burp Suite ZAP, Kali Linux pentesting,(CNAPP) Cloud Native Application Protection Platform,(EDR) Endpoint Detection ResponseSecurity Compliance Audit Experience—NIST CSF/RMF frameworks, NIST 800-53rev5, NIST 800-171 & 800-172 for CMMC Cybersecurity Maturity Model Certification and ITAR, GRC Archer, Metric Stream

Experience

1. Principal Cyber Security Engineer Threat Response

   Dow Jones

   Jan 2025 — Present · Austin, TX, US

   Reduce risk 12% across 3 quarters tracked in metrics & improving audit governance controls- Develop close working relationship with each of line-of-business across 7 sub-companies & 3 geographic global regtions. Provide remediation strategies in partnership with (BISO) business information security officers, deputy CISO, legal, governance & compliance- Directing 17 incident response investigations & briefing chief executives on business impact- Principal contributor to 57 detection engineering customized alerts, table top exercises & threat emulation- Build threat hunting & intelligence with A.I. mapped to frameworks: MITRE ATT & CK / Cyber Analytics Repository- Develop detection, response & threat emulation tools for cloud: Kubernetes clusters, AWS containers.

Education

• Utah State University

  Bachelor's degree, National Security & Intelligence

• OSI, DC3 Defense Cyber Investigations Training Academy

  Security Incident Response, Penetration Testing

  2015