Dr. Alonso Márquez

Project: A Reliable Agentic Planning System: Agentic planning system combining Hybrid ML techniques, Large Language Models and Logic Programming. I was the project architect and main developer. I invented a new explainable, incremental hybrid inference learning algorithm and implemented it using LLMs (large language models), logic programming and a hybrid vector database (Elasticsearch). The target application was an interactive agentic planning system that continuously learns until it achieves high reliability (no hallucinations or constraint violations).

Architect and advisor for the PR2 Support Management System of the One Defence Data Programme (1DD).

The main objective of this project is to replace and enhance the functionality provided by the current Qradar implementation with a new Splunk Enterprise Security (ES) solution while fitting within the limited infrastructure available and with a minimal impact on the existing QRadar log collection solution. I created the entire solution architect for the project. The solution was carefully crafted to fit in the very limited HW resources available (around half of Splunk best practices) including custom setting for Splunk Enterprise (indexing and search tiers) and ES. The main activities performed are: Definition of the Solution architect/design: • Infrastructure architecture/design including: ◦ Syslog based log collection design (using SC4S Syslog Servers and WEC) ◦ Splunk servers and storage design (using VMWare and SmartStore) • High Availability/Failover/Backup and Redundancy Architecture for all the solution components (including SC4S and Splunk). • Design of customised SC4S configurations/settings • New Splunk Apps and updates to the existing ones required for this project. • SIEM solution architecture (using Splunk's Enterprise Security). ◦ Log Sources and Collection/Parsing Method. ◦ Data Sources, Indexes and Datamodels required ◦ Mapping existing QRadar alerts to ES Data Models/Lookups. ◦ Specification of the full development/update cycle (using Git and Ansible) and ◦ Optimisation strategy for migrated alerts and associated CIM data models. Definition of the detail Project Schedule. Created Ansible scripts to set up Dev and Prod environments (Splunk multi-site cluster).

H&M Group (Sweden): Worked as Product Owner, Architect and Scrum Master in the Predictive and Proactive Office (7 projects). This is H&M's AIOps group and its mission is to prevent recurrent incidents by proactively finding and fixing their root causes. My main responsibilities have been the definition of user stories (AIOps Business Cases), vendor and stakeholder management, process improvement and specialized technical support in big data/analytics (Splunk/ServiceNow) and artificial intelligence (clustering & predictive analytics). I have also played the role of Scrum Master and AIOps Evangelist. My main contribution was to dramatically increase the business value delivered by this office after implementing a more agile and effective way of working (WoW). Delivered three new projects (with full endorsement from the stakeholder) and two MVPs after two trimesters without any delivery. Also identified candidate business cases in the store and sales areas, addressed several technical challenges with Splunk and Service Now and created a Business Value Assessment Tool (using Splunk).

Project: Lexii Lexii is an end-to-end, online, smart conveyancing platform that connects both buyers and sellers with real estate agents and solicitors. It is designed to provide all conveyancing parties with up-to-the-minute updates on key developments in their transaction and tailored workflow tasks to speed up transactions and improve transparency for all parties. Examples of features include document generation (e.g. contracts), signatures, settlement calculations and integration with widely used conveyancing tools, such as PEXA. This project was developed using the OutSystem platform. I was the architect and one of the two developers on the project. I was fully responsible for the persistent tier, including defining the data model schema and developing an OutSystem extension to integrate with the company's hosted MySQL instance (using Integration Studio). I also developed some of the critical components of the business tier, including a custom authentication component and rest service integration with external tools. Other tasks included: • Refactored and optimised SQL queries and server actions to address serious performance issues. • Other system administration tasks including setting up and managing the company's servers and applications (e.g. database), hardening the application and automating common tasks (e.g. testing).

We have created a platform that integrates natural language, business rules and machine learning with Big Data Engines like Splunk. This platform is the foundation for our intelligent interfaces and solutions. Please visit our website at https://openintelligence.com.au

* Federal Government Department – Tenable Specialist Main objective of the project has been the replacement of the current system with a Tenable.sc COTS solution across the whole organisation. I created the Development Environment Specification, Acceptance Test Procedures, and an early draft of the Detail Design. I have also automated the provisioning and configuration of Tenable core appliances (Nessus, Tenable.sc CV, Nessus Network Monitor) and reversed-engineered IP ranges from a variety of sources including host ip addresses. * Federal Government Department - Splunk architect/specialist Remediation, optimization and upgrade of a Splunk/Enterprise Security multi-site cluster environment.

SEA2273 (Refresh of Networks & Systems) Defined the Automation Detail Design and related Key Design Decisions (KDD). Creation of the project RHEL SOE (including setup of security tools and hardening). RHEL support to the team Fully automated (using Ansible, Nutanix and WMWare vCenter) - the provisioning and configuration of Windows and RHEL virtual machines. - The installation and setup of a Yum/Git/GitLab/Ansible Tower servers - The installation and setup of ELK (Elastic) servers - The installation and setup of Carbon Black Response servers

Short contract to address a variety of issues in the Splunk configuration/automation for the DLAN2 project including: - Performed a full system health check and remediated most critical issues. - Fully automated the configuration of the db-connect App (including identities) and the distributed search settings for SHs (using PowerShell). Refactored and fixed large number of issues in the existing automation script. - Fully automated the integration with the following applications: • ePO (extracted whitelisting, malware, titus and dlp events) • SCCM (SW installs/patches) • Solarwind • Forescout - Created CIM mapping & dashboards for above logs.

Responsibilities/Roles: Played Splunk consultant, Security Architect and pre-sales roles. Main Projects: Security as a service offering for the Protected and Classified Clouds including the SIEM as a Service offering (using Splunk), Continuous Diagnostic and Monitoring as a Service (Forescout), Vulnerability Management as a Service (Tenable) and User/Entity Behavior Analytics as a Service (DTex). Deliveries: Defined the application/infrastructure/security architecture for several of Fujitsu's as a service offering including the architectural deliveries required for the IRAP/security accreditation process. Also wrote the response for several security/SIEM related tenders. I also contributed to the setup of a variety of Splunk environments including the Security as Service Offerings demo and the internal Fujitsu FCSOE SIEMS.