Frederick Jones

[Cyber Security Professional] : 15 years of experience

[Certifications] : CISSP, GCIH, GNFA, CISM, CIPT, CCNA CyberOps

[Focus] : Threat Detection and Incident Response

[High Profile Projects] : FIFA 2014 World Cup (SOC Architect) and Rio 2016 Olympic Games (IT Security Architect)

[Industry] : 10 years experience in Finance, 10 years in High Tech

[Education] : M.S. in CS, B.Eng. in EE

I [only] offer Cyber Security automation and orchestration services using python and restful APIs to integrate security products, mostly around an incident response or SIEM platform. I have extensively automated several tasks for the following platforms: QRadar, FortiSIEM (AccelOps), Resilient, Splunk, Cylance, Carbon Black Response, Bit9, Symantec Message Labs, Symantec Protection Engine, Check Point Sandblast, Office365 Active Directory logs, Anomali, ThreatCrowd, Bradford NAC. For Active Directory, I use PowerShell.

As part of the service, I provide expert advice and recommendations to your staff without additional cost on those platforms to facilitate the automation and orchestration efforts. 

If the product you are interested in automating is not in the list above, if it has a documented restful API, I am almost sure i will be able to automate and integrate. If your product does not have a restful API you should consider switching. :)