Stephen O'leary
Principal Information Security Engineer
Vale of White Horse, England, United Kingdom
Summary
👤
Senior🎓
Top SchoolStephen O'Leary is a Principal Information Security Engineer with 15+ years at Sophos and eight years focused on security engineering, specializing in AWS, Splunk, data analytics and incident response. He designs scalable pipelines to ingest, normalise and correlate disparate security and identity data, improving SOC visibility and response effectiveness across large environments. A former SQL Server DBA, he combines deep database and operational know-how with cloud-native security tooling to drive reliable, auditable detection and reporting. Stephen contributes to open-source security tooling—adding a Cortex analyzer for Sophos Intelix that integrates threat intelligence into TheHive ecosystem—showing a knack for practical back-end integrations. Based in the Vale of White Horse, he’s known for turning complex telemetry into actionable insight and for pragmatic advocacy that increases Splunk adoption and ROI across the business.
8 years of coding experience
10 years of employment as a software developer
BSc Computer and Multimedia Systems Computer Science and Electronic Engineering, BSc Computer and Multimedia Systems Computer Science and Electronic Engineering at University of Liverpool
Stackoverflow
9,098reputation
1.5mreached
269answers
3questions
sql
top-5%
sql-server
top-5%
database
top-5%
Github Skills (20)
apim10
python10
analyzer10
sql-server10
api10
sql9
error-handling9
database9
operator9
open-source8
json8
computer-forensics7
incident-response7
64-bit6
powershell6
Programming languages (5)
Github contributions (5)
TheHive-Project/Cortex-Analyzers
Nov 2019 - Dec 2019
Cortex Analyzers Repository
Role in this project:
Back-end Developer
Back-end DeveloperContributions:31 commits, 1 PR, 1 issue in 29 days
Contributions summary:Stephen primarily contributed to the development of an analyzer within the Cortex platform for the Sophos Intelix service. Their work involved creating the initial implementation, adding logging, and implementing error handling. The user also modified the summary function, improved error messages, and refactored code related to client initialization and data reporting. Their contributions focused on integrating with an external threat intelligence API and integrating the results into the Cortex platform.
cortexpythoncyber-threat-intelligencedfirincident-response
sophos-cybersecurity/intelix
Sep 2019 - Oct 2020
Client for the Sophos Labs Intelix API
Contributions:1 PR, 11 pushes, 1 branch in 1 year
apisophos
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.