Looking for a job

Steven Rice

@stevenrice

Message

I design and optimize Microsoft cloud security, MDR, and threat detection for enterprise customers.

United States

Message

What I'm looking for

I'm looking to lead and improve enterprise security operations, Microsoft cloud security, threat detection, identity protection, and incident response while advising customers and mentoring security teams.

At Ontinue, I design, implement, and optimize Microsoft security solutions for enterprise customers using Defender XDR, Sentinel, Defender for Cloud, Entra ID, Azure, Azure Arc, and Intune. I serve as a primary technical lead and trusted advisor, including for the company’s largest North American customer.

I’ve helped customers achieve Microsoft Secure Scores more than 20% above Microsoft’s average for similarly sized organizations. My work spans identity security, Conditional Access, incident investigation, vulnerability management, log ingestion, and security posture improvement.

Previously at Crowe LLP, I engineered and supported enterprise security monitoring, endpoint detection and response, and threat detection solutions across customer environments. I led threat hunting, built SIEM detection logic using MITRE ATT&CK, conducted incident response investigations, and developed Python automation for SOC operations.

Across more than 20 years in IT, I’ve supported infrastructure, identity, access management, endpoint security, and enterprise operations. I’m CISSP-certified and bring hands-on experience with KQL, Python, Microsoft security platforms, and mentoring junior security professionals.

Experience

Work history, roles, and key accomplishments

Current

Senior Cyber Security Advisor

Current

Ontinue

Sep 2022 - Present (4 years)

Design, implement, configure, and optimize Microsoft security solutions for enterprise organizations. Led security posture improvement initiatives and served as primary technical lead for dozens of enterprise customers.

Defender XDR Microsoft Sentinel Microsoft Defender for Cloud Microsoft Entra ID Azure Azure Arc Microsoft Intune KQL Python Conditional Access Threat Hunting Incident Response Security Architecture

Senior Managed Detection & Response Consultant

Crowe LLP

Sep 2016 - Sep 2022 (6 years)

Engineered and supported enterprise security monitoring, endpoint detection and response, and threat detection solutions across multiple customer environments. Served as senior escalation point for advanced security investigations and engineering issues.

SIEM EDR Carbon Black Sysmon ELK Stack MITRE ATT&CK Threat Hunting Incident Response Python REST APIs SOC Operations

Identity & Access Management Administrator

Software Information Systems

Jun 2016 - Sep 2016 (3 months)

Managed Active Directory accounts and security groups supporting more than 10,000 users. Maintained secure identity lifecycle management and enterprise access controls.

Active Directory IAM Security Groups User Administration

IT Administrator

E-Z Pack Manufacturing

Sep 2015 - Jun 2016 (9 months)

Administered Microsoft 365, Active Directory, VMware, networking, endpoint security, backup, disaster recovery, and enterprise infrastructure. Managed security patching, antivirus, user administration, and infrastructure operations.

Microsoft 365 Active Directory VMWare Networking Endpoint Security Backup Disaster Recovery Security Patching Antivirus

IT Specialist

Citizens Commerce National Bank

Aug 2013 - Sep 2015 (2 years 1 month)

Administered Active Directory, Microsoft Exchange, virtualization, enterprise antivirus, and backup systems. Supported information security audits and compliance initiatives.

Active Directory Microsoft Office Virtualization Antivirus Backup Systems Security Audits Compliance

Network Technician

New Vista Mental Health

Dec 2004 - Aug 2013 (8 years 8 months)

Supported IT infrastructure serving approximately 3,000 users. Administered Active Directory, endpoint protection, software patching, backup systems, and network infrastructure.

Active Directory Endpoint Protection Security Software Patches Backup Systems Network Infrastructure