Mario Michel

• Sized, planned, implemented and operated a FortiManager and FortiAnalyzer with over 330+ FortiGates, 270+ FortiAPs and 120+ FortiSwitches. Including + 50 custom CLI scripts.
• Sized, planned, implemented and operated a monitoring stack based on Prometheus, Grafana and Alertmanager with the FortiGate Prometheus community exporter. Evaluated in home lab, adjusted to company needs and integrated into the internal ticket/ERP system.
• Created a multi-source IP threat feed combining a self-hosted T-Pot honeypot, FireHOL blocklists and emerging threats from Proofpoint .Integrated the feed into a CLI hardening script with best practices, systems checks, PSIRT checks, integration checks and updates for existing systems such as FortiAnalyzer, FortiManager and firewall monitoring. It also uses the FortiGate ISDB and adds logging and statistics and then automated the whole hardening rollout from about 2 hours of manual copy-and-paste to a 2-minute automated run.
• Designed and built a vulnerability-management product based on OpenVAS and DefectDojo.
• Owner of all OpenVAS and vPenTester topics.
• Product owner and main contact for Fortinet.

Continued in the Network & Security team after ITSDONE became CONVOTIS.

• Wrote a config backup tool for network devices.
• Rolled out Oxidized for 200+ nodes.
• Owner of all OpenVAS topics.
• Darktrace anomaly specialist.
• Migrated IP address management from IP-Plan to NetBox.

Project: proof-of-concept vending machine accepting Bitcoin via the Lightning Network.