Open to opportunities

Brett Thomas

@brettthomas

Message

I investigate threats and strengthen identity controls across SOC, IAM, and GRC operations.

United States

Message

At IBM, I investigate endpoint malware, suspicious sign-ins, and PowerShell activity, correlating endpoint, identity, email, and network telemetry to accelerate containment and response.

I bring 13+ years across SOC operations, identity engineering, and GRC. I've led SailPoint, Oracle, and Aveksa identity implementations, deployed Duo MFA, and supported audit readiness, resilience, and business continuity programs.

Experience

Work history, roles, and key accomplishments

Current

SOC Cyber Security Analyst

Current

IBM

Dec 2024 - Present (1 year 9 months)

● Triage and investigate endpoint malware, suspicious sign-ins, and suspicious script/PowerShell activity; validate severity, determine scope, and drive next actions.
● Correlate endpoint, identity, email, and network telemetry using SIEM/EDR/SOAR workflows to confirm malicious behavior and accelerate response.
● Document investigation outcomes and containment recommendations in ticketing/case sys

SIEM EDR SOAR Endpoint Security Incident Response Threat Detection PowerShell Malware Analysis Security Operations Triage

Governance, Risk & Compliance Senior Associate

The Depository Trust & Clearing Corporation (DTCC)

Nov 2023 - Nov 2024 (1 year)

● Developed and executed a comprehensive program tailored to support the professional growth and development of Governance, Risk and Compliance (GRC) staff
● Management of business continuity resilience plans, ensuring adherence to policies and procedures, overseeing exercise management, and incident response protocols to maintain operational continuity and resilience
● Facilitate and respond to a

Cloud Infrastructure Audit Regulatory Compliance Cybersecurity Customer Satisfaction ISO 27001 System Configuration Written Communication IT Operations IT Compliance Problem Solving Information Security Analysis Vulnerability Vulnerability Assessment Security

Lead IT Risk & Security Engineer

The Depository Trust & Clearing Corporation (DTCC)

Feb 2022 - Nov 2023 (1 year 9 months)

● Strategically align governance analysis, to ensure compliance with industry standards and regulations while optimizing operational efficiency
● Managed and guided squad member to stay ahead of governance, audit, and compliance tasks, fostering a culture of accountability and excellence

Identity & Access Management Engineer

Zions Bancorporation

Dec 2017 - Feb 2022 (4 years 2 months)

● Technical lead for planning and implementation from RSA Aveksa to
Sailpoint IdentityIQ
● Manage quarterly Disaster Recovery for Aveksa and Sailpoint
● Support and update the company’s custom Access Request site
which hosts application and role requests
● ETL Pentaho lead engineer and administrator for data stream
maintenance, creation, and updates

Information Security Analyst

Noble Energy

Feb 2014 - Nov 2017 (3 years 9 months)

● Management and administration of employee and contractor
accounts
● Project and technical lead for Identity Management implementations
-Oracle Identity Manager
-SailPoint - IdentityNow
● Implementation of multi-factor authentication and administration of
Duo
● Community service relations coordinator for Finance & IT
conferences
● Implementation and adjustment of company processes to e

Application Developer

Noble Energy

Jun 2011 - Jan 2014 (2 years 7 months)

● Oracle P2 and middleware development
● Technical lead for implementation of Oracle Identity & Access
Manager
● University recruitment coordinator and college hire peer mentor