Andrew Snyder Email & Phone Number

Denver, CO, US

New York, NY, US

• Utilized Splunk, Microsoft Azure Sentinel, Microsoft Defender Cloud, and Symantec SIEM within theBNYM SOC to investigate and triage alerts, engage in incident response and handling, identify novelthreats to the.
• Provided initial response and analysis for security events including but not limited to intrusion detection,malware infections, denial of service attacks, privileged account misuse, and network breaches.
• Triaged alerts to determine if they were False Positive, Incidents, or misconfigurations and utilized datafrom firewall logs, packet captures, web proxies, network monitors, and several SIEM systems to conductfurther.
• Investigated cyber incidents utilizing the MITRE ATT&CK framework to identify, understand, andmitigate current and future cyber attacks.

Andover, MA, US

• Spearheaded system administration and technical troubleshooting, leveraging extensive analytical andtechnical problem-solving skills to lead incident analysis and resolve a wide range of complex issues.
• Key role in ensuring the availability of mission processors for the National Reconnaissance Office (NRO)by providing proactive 24/7 Tier 2 maintenance of various *nix and Windows machines.
• Championed technical excellence and regulatory compliance across the IT infrastructure andestablished security policies and procedures while guiding and supporting service transitions andmigrations to cloud.
• Deployed in-depth communication skills to collaborate with customers to ensure access and availability

Andover, MA, US

• Served as a Network Defense Analyst for the NRO SOC utilizing Arcsight and other SIEM tools to triagenetwork security alerts, engage in incident response investigations, and lead risk mitigation related tonetwork.
• Performed alert tuning to reduce the prevalence of false positive alerts while allowing for greater indepth analysis of potential true positives.
• Performed threat analysis and monitoring of intrusion detection/prevention systems. Gathered datafrom firewalls, web servers, and DNS logs to identify misuse, malware, and unauthorized activity onnetworks.
• Delivered high-quality technical support for the DOD Critical Incident Response Team (CIRT) Hotline,ensuring a swift and timely response to high-severity threats.

Arlington, Virginia, US

• Worked within USCYBERCOM and NSA SOC to collect and analyze global internet traffic to identifyand mitigate nation-state actors' attempts to infest institutions across the globe with spyware andransomware.
• Conducted analysis of network traffic to detect network anomalies and malicious behavior; analyzednetwork vulnerabilities and facilitated the development of targeted and effective countermeasures.
• Analyzed intercepted intelligence information for metadata and content; used data to reconstruct anddocument target networks; reported findings in serialized products; refined collection and computernetwork.
• Prepared technical products and reports in support of NSA and USCYBERCOM targeting efforts;coordinated with analysts and managers to enhance operational readiness, capability, and effectiveness.