Looking for a job

Matthew Shepherd

@matthewshepherd1

I investigate threats and automate detection and response across multi-client security operations.

At GTT, I lead security investigations across public- and private-sector clients, triaging EDR alerts, phishing campaigns, and suspicious activity through Splunk SIEM and Cisco security tooling.

I write Splunk detection rules and response playbooks informed by threat intelligence, while building Python and Bash automation that reduces analyst overhead. I also train new CSOC analysts across the security tool stack and investigation standards.

Previously, I strengthened vulnerability management and incident detection at Trayport and supported ISO 27001-aligned security policy and supply-chain compliance at Lidl GB. My background spans MSSP, in-house, and consultancy environments, supported by a First-Class BSc in Cyber Security and Computer Forensics.

Experience

Work history, roles, and key accomplishments

Current

Security Analyst

Current

GTT

Jul 2025 - Present (1 year 2 months)

Lead security investigations across a multi-client portfolio, triaging and responding to EDR alerts and phishing campaigns. Authored detection rules in Splunk and developed Python/Bash scripts to automate analyst tasks.

Splunk Cisco AMP Cisco Umbrella Cisco IronPort ESA Cisco SDA EDR Threat Intelligence Python BASH Playbook Development Onboarding Training

Junior Operational Security Specialist

Trayport

Jun 2023 - Jun 2024 (1 year)

Performed vulnerability assessments on over 1,000 devices using Rapid7 and Nessus. Developed automated alert systems in Splunk SIEM and administered a comprehensive security tool stack.

Rapid7 Nessus BASH PowerShell Python Microsoft Defender CrowdStrike Falcon Cloud Security IDS IPS Splunk Vulnerability Management Automation

Junior Cyber Security Consultant

Lidl GB

Aug 2022 - Jun 2023 (10 months)

Liaised with external suppliers to ensure supply chain security and compliance. Created and maintained information security policies within an ISO 27001 compliant ISMS.

ISO 27001 ISMS Vulnerability Scanning Risk Management Stakeholder Communication Security Awareness

Developer

Kingston University

Jan 2022 - Aug 2022 (7 months)

Implemented Azure Service Bus for secure and efficient application integration across distributed systems. Conducted database management and data analysis to ensure data integrity and optimize performance.

Azure Service Bus Database Management Data Analysis Distributed Systems

Service Desk Analyst

Kingston University

Feb 2019 - Jan 2022 (2 years 11 months)

Monitored service status and managed the full lifecycle of service desk tickets. Responded to technical support requests and escalated complex incidents in accordance with SLAs.

IT Service Management Incident Management Troubleshooting Knowledge Base Management Customer Support

IT Technician

Chelmer IT Support

Mar 2017 - Aug 2018 (1 year 5 months)

Provided first-line IT support, addressing hardware, software, and network issues. Managed user accounts in Windows Server Active Directory and configured firewalls and routers to enforce security policies.

Active Directory hardware troubleshooting Software Troubleshooting Network Configuration Firewalls Routers Disaster Recovery