Mark Wray

PROFESSIONAL SUMMARY

Results-driven Cyber Security professional with eight years of experience in Cybersecurity and IT

across roles such as Security Engineer and Incident Response Analyst. Managed technical

relationships for enterprise portfolios, driving platform adoption and enhancing detection

visibility. Translated complex Security Operations Center activities into business value for

stakeholders while developing high-fidelity detections, analytics, and automations to advance

proactive security postures. Leveraging the AI security operations platform GreyMatter.

SKILLS

• SOAR Workflow for Threat Containment

• Detection Development

• High-Fidelity Detection Tuning

• SIEM Log Source Optimization

• Logging Gap Analysis

• Incident Response Triage & Guidance

• Technical Account Management

• Project Management

• Customer Onboarding & Training Delivery

• Technical Reporting

• Root-Cause Analysis

• System Troubleshooting

WORK HISTORY

02/2025 to 08/2026 GreyMatter Engineer

ReliaQuest

• Owned end-to-end technical relationships for a portfolio of up to 12 enterprise

accounts as Technical Account Manager, Security Architect, and Security

Engineer, improving ROI across GreyMatter and existing security tools while

supporting business operations.

• Delivered quarterly Executive Business Reviews and stakeholder engagements to

C-suite and security leadership, translating data-driven security outcomes into

business value, risk management insights, and actionable recommendations.

• Supported customer onboarding by establishing GreyMatter and SIEM

environments, connecting technologies, and conducting technical workshops to

strengthen security information and event management workflows.

06/2023 to 02/2025 Security Architect

ReliaQuest

• Enhanced detection visibility by 98% through analytics, rapid detection

deployment, and technology and logging gap analysis in a complex enterprise

environment.

• Managed security engineering projects, including SIEM migrations and log source

integrations, applying logging best practices for Splunk, Microsoft Sentinel,

Microsoft Defender for Endpoint (MDE), Google Chronicle, IBM QRadar,

Exabeam, and SentinelOne SDL.

• Developed and implemented standard operating procedure-driven SOAR

workflows with endpoint, identity, and network tooling to reduce threat

containment time by 99% and improve incident management.

01/2022 to 06/2023 Detection Architect

ReliaQuest

• Developed and maintained high-fidelity detection logic, enhancing MITRE ATT&CK

coverage, supporting intrusion detection, and maintaining false positives below

10%.

• Collaborated with incident response teams during high-severity incidents,

confirming containment actions, recommending mitigation strategies and refining

triage guidance for incident analysis.

• Worked with clients to refine detection development project plans.

01/2019 to 12/2021 MDR Security Analyst, Junior

Mosaic451 LLC

• Maintained and tuned detection logic to improve Security Operations Center alert

quality and support emerging cybersecurity threat identification.

• Analyzed SIEM and EDR security incidents to identify threats and perform incident

analysis.

• Conducted and evaluated red team and penetration testing to implement

detection logic and execute containment automations for cyber incident

prevention.

07/2018 to 01/2019 IT Specialist

Northwest Career College – Las Vegas, NV

• Provided network, hardware, and software technical support to staff and

students, resolving issues and maintaining daily operations support.

• Imaged, prepared hardware and software upgrades, and deployed computer

systems to maintain reliable business operation.

• Ran and terminated Ethernet cabling throughout the building, connecting to

existing network switches.