John Kostuch
Details
East Asian Stuides
Penn State University
1985 : 1990
Master's Certificate
Project Management
University of Pittsburgh - Joseph M. Katz Graduate School of Business
2011 : 2012
Certificate
Information Security
Westmoreland County Community College
2003 : 2005
2023 : Present
Zayo Group
Senior Cybersecurity Engineer
As a professional services security consultant, I collaborated with assigned Sumo customers to implement and enable Sumo Logic CIP and CSE solutions. Activities included data source collection, log parsing, rule building and tuning, normalized schema mapping and data enrichment. Education and knowledge transfer occurred throughout each engagement. I established relationships with customers to achieve and maintain their success and across Sumo to improve Sumo applications (CIP and CSE) and documentation. Working on a sub-team, developed security analytics queries and dashboards that focused on the MITRE ATT&CK framework. For a large multi-tenant customer, I built dashboards and metrics for executive level reporting on data consumption, ingestion cost and incident response.
2022 : 2023
Sumo Logic
Professional Services Security Consultant
In this role, I coordinated vulnerability management for 125 fintech applications. Under the organization’s robust vulnerability assessment process, I worked with application teams to identify and remediate vulnerabilities according to their risk score. I also assisted in the development and implementation of security procedures. Established working relationships to manage and improve the remediation processes and risk management.
2021 : 2022
TTI of USA
Vulnerability Management Coordinator
As an Information Security Consultant, I support a healthcare organization. Managing and administering their LogRhythm SIEM for efficient operation and response. Activities includes rule creation, reports, dashboards, alarm response and two successful version updates. Revising and tuning of rules and alarms. Troubleshooting system errors, non-collecting hosts and missed heartbeats.
2020 : 2021
Presidio
Information Security Consultant
In this role, I facilitated log source onboarding in support of a $4.3M global migration to LogRhythm’s Security Incident Event Management (SIEM). I also oversaw data collection of log source types, log format alignment, and firewall changes. Additionally, I migrated logs to new SIEM solution to ensure uninterrupted log collection and reporting as well as managed log tuning and log alarming administration and delivered status reporting to stakeholders.
2016 : 2017
FIS
Information Security Analyst Specialist
Skills
Business Process Improvement, CISSP, Computer Security, Disaster Recovery, Enterprise Architecture, Event Management, Event Planning, Governance, Information Assurance, Information Security, Information Security Management, Information Technology, ITIL, IT Management, IT Service Management, JIRA, LogRhythm, Microsoft Office, Podcasting, Process Improvement, Professional Services, Project Management, Project Portfolio Management, Regulatory Compliance, Relationship Managment, Requirements Analysis, Risk Assessment, Risk Management, Security, Security Information and Event Management (SIEM), Slack, Software Documentation, Software Project Management, Sumo Logic, System Administration, System Architecture, Training, Vendor Management, Visio, Vulnerability Assessment
About
As a successful information security professional, I developed advanced skills in effective intrusion prevention, risk management best practices, regulatory compliance, and information security policies. I possess broad knowledge and enjoy success in forging long-term relationships and maintaining continuous communications with stakeholders regarding information security concerns. What truly sets me apart from my colleagues is my ability in quickly establishing a rapport while building trust and respect. Success is consistently realized with my unwavering determination, demonstrating uncompromised commitment, and maintaining good communication under every circumstance.