Thomas Pritchard

Led the development and maintenance of incident response plans, playbooks, and runbooks, ensuring proactive security. Triaged cyber incidents, conducted lessons-learned activities, and participated in purple team exercises. Served as a SOC escalation point. Engineered and maintained SIEM backend, created alerts, and managed security controls design and implementation. Conducted data analysis, report building, and information sharing. Managed a team to enhance the security posture and meet SLAs.

Developed and maintained SOC documentation and Cyber Security Policy, aligning with industry best practices. Facilitated knowledge-sharing and onboarding of new SOC staff. Acted as an escalation point for SOC events and queries, improving SIEM tool alerts. Contributed to the design and implementation of security controls, participated in data gathering, and played a crucial role in report building.

Conducted initial triage, analysis, and handling of SIEM tool alerts, identifying trends and escalating concerns promptly. Provided assessments in the change management process, creating insightful reports for informed decision-making. Suggested and implemented process improvements, demonstrating a commitment to efficiency and continuous enhancement.