Andy Conner Email & Phone Number

Bentonville, Arkansas, US

US

San Francisco, California, US

• Operate as the Team Lead for forming and establishing the Incident Response DFIR Team as part of assigned duties.
• Dispense subject matter expertise to enterprise stakeholders for Cloud, VDI, and new EDR solution projects.
• Led the creation, development, and improvement of the DFIR program for rapid triage, mobile, cloud, and disk-based forensics.
• Effectively administer quality assurance audits and provide mentorship for IR, Malware Reverse Engineers, and SOC Analysts.
• Furnish advanced-tier-escalation support to the Incident Response team for memory, disk-based forensics, and malware analysis.
• Leverage a wide range of new tools, techniques, and procedures for our overarching Incident Management and Forensics Strategy.

San Francisco, California, US

San Francisco, California, US

San Francisco, California, US

• Performed the investigation of incidents and conducted routine threat hunting by employing different detective tools and techniques, including Windows endpoint forensics, memory forensic analysis, packet capture.
• Actively engaged with and provided leadership to the endpoint forensics team in CSIRT training exercises and debriefs.
• Charted creating and preparing actionable incident reports for continuous improvement from the case “lesson learned” phase.
• Dispensed legal case debriefs, response updates, and issue reporting in cooperation with senior leadership and impacted business units.

Bentonville, Arkansas, US

• Played a key role by overseeing incident investigations and routine threat hunting through employment of packet capture analysis, network forensics, Windows endpoint/server forensics, memory analysis, and malware.
• Drove significant improvements in pre-existing Security Incident Response methodologies and frameworks.
• Administered in-depth host and network forensic investigations across integrated and non-integrated business units, log analysis, and malware triage to support investigations.
• Operated with a focus on facilitating the reverse engineering of malware through behavioral-based analysis, memory forensics, and the occasional code-based analysis.
• Led the creation and deployment of new scripting, correlation, and appliance rule/signature based on current threat intel and previous case indicators.
• Orchestrated the implementation of the IR case management system, workflow, playbooks, documentation requirements, and metrics and reporting of the efficacy of the IR team.

Bentonville, Arkansas, US

Bentonville, Arkansas, US

• Guaranteed the success of Intrusion Analyst direct reports and provide metrics, trending, and operational status to senior management.
• Spearheaded security posture initiatives by partnering closely with the intra-team, external teams, and vendors.
• Performed job shadowing duties for individuals interested in Security Operations to allow them to enhance their expertise.
• Led the creation and development of high-level incident timeline analysis for senior management to ensure success.
• Furnished support in the creation of processes and procedures, technical documentation, and completion of project tasks.
• Cooperated effectively with vendors, outside consultants, and other third parties to drive improvements in information security posture.

Bentonville, Arkansas, US

• Conducted the monitoring of, responded to and performed analysis into HP ArcSight SEIM alerts from monitoring alliances.
• Dealt with and responded to security-related escalated tickets from different departments and collaborated with multiple teams to communicate and administer expectations during issue resolution.
• Obtained and maintained a strong awareness of trends in security, regulatory, technology, and operational requirements.
• Carried out the administration of the rules and policies for Snort/HP TippingPoint and Web Content Filtering through McAfee Web gateways.
• Navigated the coordination of escalations to internal support teams to guarantee timely delivery of incident resolutions.
• Furnished assistance and support in delivering visualization analysis and identifying baseline traffic.

Bentonville, Arkansas, US