top of page
IMG_1137.jpeg

Michael Ferig

Senior Information Security Analyst

Credentials:

MSc, CISM, CIPP/US, SecurityX

Email:

Location:

Raleigh-Durham, North Carolina

  • LinkedIn
  • YouTube

A Bit About Me

I'm Michael Ferig, a senior information security analyst at UNC Health, where I help protect one of North Carolina's largest health systems. My work covers security reviews and risk assessments, HIPAA and PCI compliance, and security awareness, including training employees and writing the monthly security newsletter for more than 40,000 people.

​

My path into security started in IT and network engineering. I spent nearly six years at Verizon, first on global voice and switching networks and then on the Insider Threat Operations and Data Loss Prevention team, and I taught networking and cybersecurity as adjunct faculty at ECPI University.

​

I hold a Master of Science in Information Technology with a concentration in Cybersecurity and Digital Forensics from Middle Georgia State University and a Bachelor of Science in Cybersecurity from Bellevue University. My certifications include CISM, CIPP/US, CompTIA SecurityX (CASP+), Security+, Network+, and Splunk Core Certified Power User.

​

I'm now pursuing my Juris Doctor in the evening program at North Carolina Central University School of Law, focused on cybersecurity, privacy, and technology law. I believe in continuous learning, and in sharing what I learn so others can protect themselves in the digital age.

Work Experience

July 2025 - Present
UNC HEALTH

Aug 2024 - Sep 2025
ECPI UNIVERSITY

Mar 2019 - Jan 2025
Verizon

April 2017 - March 2019
Perspecta

Senior Information Security Analyst

  • Complete 10 to 15 security reviews and risk assessments each month for devices, new technologies, cloud solutions, and vendor products, evaluating each against HIPAA requirements, PHI and PII protection, security frameworks, and UNC Health standards.

  • Lead and deliver cybersecurity and phishing awareness training across UNC Health, including mandatory monthly sessions after phishing simulations.

  • Develop and publish the monthly InfoSec Connect cybersecurity newsletter for UNC Health's 40,000+ employees.

  • Created the full PCI DSS training required for every UNC Health employee who handles card payments, from clinical staff to food service workers.

  • Led cybersecurity for the Campus Health transition, reviewing about 400 devices and software applications on site before integration.

  • Own the Information Security ticket triage process, routing requests and incidents to the right analyst or team.

  • Led the planning, build, and launch of the new Information Security SharePoint site.

  • Supported the Imprivata implementation with cybersecurity guidance.

  • Conduct full security reviews and risk assessments for the Architecture Review Board, ensuring proposed solutions meet HIPAA and UNC Health security standards.

CST Adjunct Faculty

  • Developed and delivered curricula in cybersecurity and networking, preparing students with practical, industry-relevant skills.

  • Taught network security, threat analysis, risk management, and secure system design.

  • Mentored and supported students in applying complex technical concepts.

  • Ran hands-on labs and exercises to reinforce theory through real-world applications.

Cyber Threat Intelligence and DLP Analyst II

  • Served on Verizon's Insider Threat Operations (ITO) and Data Loss Prevention (DLP) team, protecting corporate assets from internal and external threats.

  • Investigated insider threat and data loss cases using Splunk, Proofpoint, Forcepoint, CrowdStrike Falcon, and Symantec DLP.

  • Managed email security and phishing response with Proofpoint TAP and CLEAR.

  • Conducted Identity and Access Management (IAM) reviews and built threat use cases to detect data exfiltration, fraud, and sabotage.

  • Coordinated incident response with IBM Resilient and partnered with HR, Ethics, and Legal on high-impact investigations.

  • Prepared executive briefs with actionable recommendations for leadership.

Network Engineer III

  • Conducted surveillance and maintenance for Verizon's Global VoIP, TDM, and SS7 Switching Networks, ensuring high availability and reliability.

  • Configured and optimized network equipment settings to support evolving business needs and enhance performance.

  • Performed advanced troubleshooting and fault isolation, providing tiered technical support and rapid resolution of network issues.

  • Led testing and diagnostics of network connections (DS0, T1, Ethernet) to maintain optimal functionality and service quality.

  • Oversaw network surveillance activities, adhering to protocols and swiftly responding to alarms to prevent disruptions.

  • Managed and resolved network-related incidents, coordinating with stakeholders to ensure clear communication and timely updates.

  • Streamlined the trouble ticket process, enhancing efficiency in outage communication and escalation procedures.

Security and Wireless Network Engineer

  • Specialized in network security operations, mitigating rogue devices and security violations to strengthen security posture.

  • Analyzed critical security events with Splunk for timely threat detection and response.

  • Managed and monitored the Intrusion Prevention System (IPS) for rapid incident reporting.

  • Configured Cisco wireless devices to optimize connectivity and performance.

  • Performed diagnostics and troubleshooting to resolve complex network issues efficiently.

  • Assessed connectivity problems, ensuring seamless hardware and software operations.

  • Provided expert remote support for network troubleshooting, enhancing customer satisfaction.

Let's Connect

  • LinkedIn
bottom of page