Ever Gutierrez

Manage and optimize the enterprise SIEM platform, overseeing data onboarding, configuration governance, and application integration across multiple business units Develop and maintain advanced correlation rules and detection use cases to improve threat visibility and reduce false-positive rates Collaborate with SOC analysts and cross-functional security teams on alert enrichment, tuning, and incident triage workflows Design customized security dashboards and visualizations, delivering actionable intelligence to security operations and executive stakeholders Provide architecture guidance for log ingestion pipelines, optimizing data throughput and ensuring reliable collection from diverse source types Configure and manage log collection agents across Linux and Windows server environments, ensuring comprehensive coverage at enterprise scale Generate monthly SIEM compliance metric reports for 3 business entities, tracking log ingestion coverage and measuring the percentage of hosts actively forwarding logs to the SIEM platform Drive incident resolution for non-reporting hosts by coordinating with cross-functional infrastructure teams (virtualization, firewalls, networking) to restore log forwarding compliance Conduct root cause analysis of security and performance events, supporting SLA targets and enabling rapid incident response

Architected and deployed enterprise SIEM solutions in highly available, distributed environments supporting large-scale telecom security operations Led platform upgrade initiatives across the SIEM infrastructure and agent fleet, executing phased rollouts to minimize operational disruption Implemented the Enterprise Security module following best practices, including full knowledge transfer and onboarding for SOC analysts Designed and delivered security monitoring solutions with custom dashboards, scheduled alerts, and compliance reporting capabilities Deployed and standardized log collection agents across multi-platform environments (Linux, Solaris, AIX, Windows), consolidating data ingestion pipelines Performed complex field extractions and data normalization to ensure consistent parsing and accurate threat detection across log sources

Provided technical leadership to security engineering teams on complex SIEM solution design, architecture planning, and escalation resolution Integrated ITSM platforms (ServiceNow) with the SIEM environment for automated incident creation, streamlining SOC response workflows Configured database connectivity modules for Oracle, MySQL, and MSSQL, enabling real-time data correlation between the SIEM platform and enterprise applications Developed advanced security dashboards using HTML, JavaScript, and CSS, providing IT operations and service owners with real-time health monitoring Standardized log collection agent deployment and configuration across UNIX and Windows platforms enterprise-wide Optimized search and query performance through strategic index-time vs. search-time extraction decisions and configuration management Built proof-of-concept ITSI dashboards for banking applications, simulating transaction latency monitoring and service dependency mapping Leveraged AWS cloud services and scripted automation to support and scale security monitoring infrastructure

Served as lead security engineer responsible for enterprise-wide security monitoring, log analysis, and threat detection across front-end and middleware applications Operated the Enterprise Security (ES) module as part of the SIEM operations team, monitoring notable events and supporting threat detection and incident triage On-boarded new log sources with analysis and parsing to enable SIEM correlation, ensuring proper data normalization and event classification Configured and managed search head clusters for high availability, overseeing cluster operations and deployer management Developed proof-of-concept security dashboards for IT operations and service owners, enabling real-time application and infrastructure health monitoring Integrated real-time data feeds between the SIEM platform and relational databases, supporting business intelligence and security analytics Automated log collection agent deployment across the server fleet through custom shell scripts and standardized configuration templates Managed SIEM cluster infrastructure in AWS cloud environments, maintaining performance, availability, and data integrity

Managed enterprise IT operations for a national banking institution, overseeing help desk, incident management, and infrastructure support Implemented endpoint security solutions (Symantec Endpoint Security) and established baseline protection policies across the organization Deployed centralized ITSM tooling (CA Unicenter Service Desk) for incident tracking, improving SLA compliance and resolution metrics Managed Microsoft Exchange infrastructure and implemented email archiving solutions (Symantec E-Vault) for regulatory compliance Designed backup and disaster recovery infrastructure using Data Domain and Symantec NetBackup for daily operational continuity Led server virtualization initiative using VMware and NetApp storage, consolidating physical infrastructure and reducing operational costs