- Lead ongoing evaluations with analysis teams to provide improvements across incident response, detection, and prevention tools.- Create, prioritize, and implement schedule for sensor tuning and enrichment opportunities across cyber security deployed solutions.- Collaborate with other security team leads to design and optimize event and improvement management workflows.- Collaborate with threat intelligence team to improve efficiency of threat intelligence data dissemination for improved detection and response capabilities.- Lead team project to integrate IRMS with security detective controls for improved investigation and response times and incident scope identification. Track incident handling life cycle from preparation through lessons learned to evaluate response process improvements.

- Test, configure, expand, and manage security framework solution for enterprise endpoints in segmented, geographically disparate networks. Increased deployment saturation 130% over 24 months. Deployed additional endpoint analysis and protection capabilities to 24/7 production environment, and integrated enterprise acquired standalone networks, without interruption to business functionalities.- Collaborate with teams external to security functions for dissemination of asset configuration and support data for enterprise level asset management and unification project.- Tested, configured, deployed, and managed NGFW solution as secondary boundary protection for user related web traffic. Includes DR compliant configuration for IPS/IDS and malicious file analysis along with URL filtering and mitigation of C2 related traffic.

- Tested, configured, deployed, and managed EDR/Asset Management solution for approx. 100,000 endpoint enterprise.- Evaluated NW placement and maintained rule implementation for user web traffic detonation appliances.- Evaluated and recommended endpoint solution for zero-day threat mitigation within diverse OS and application environment.- Lead solution and implementation evaluation for multiple enterprise tools recently transferred to Boundary Protection Engineering team. Determined enhancement or replacement needs for each to be fulfilled over the following 18 months(IDS/IPS, file sandboxing, and web gateway)- Member of company-wide continuous Cyber Defense strategy evaluation for optimal monitoring and mitigation of current and forward-looking threat front.- Organized and implemented monthly training session for security knowledge enrichment provided to recent hires of Cyber Defense teams.

- Evaluated, recommended, and implemented emerging network and data protection solutions for Vulnerability Management,SIEM, and Identity/Privileged Access Management.- Developed and maintained metrics and mitigation of key enterprise risk indicators for presentation to board of directors.- Compiled and validated remediation results for network and endpoint related security events.

- Implementation lead and subject matter expert for enterprise wide re-launched vulnerability management project.- Provided configuration expertise for network scanning solution and issue mitigation for system evaluations.Anne C. Murphy CISSP, GCED, GPYC- Designed detailed assessment schedule for regionally diverse enterprise locations to perform cyclical assessments without impactto multi-shift manufacturing schedules.- Provided recommendations for timely remediation of critical assets during initial vulnerability disclosure windows.

- Implemented and maintained email encryption options, SPAM filtering, and mail domain routing system for greater than tenthousand employee network, averaging 1 million messages per day. Created, maintained and followed email incident responseprocess, including end user compromise notification and malicious behavior analysis and mitigation.- Implemented web filtering and web traffic monitoring via a transparent inline solution and explicit proxy hybrid. Create approvalprocess for user-specific filtering requests, including references to acceptable use policies for blocking justifications. Interfacewith internal departments to complete exception requests.- Evaluated, recommended, and implemented emerging network and data protection technologies.- Participated in project reviews for proposed technologies to evaluate impact to network and data integrity.- Created, managed, and revised server vulnerability analysis for mitigation and compliance with HIPAA and PCI policyrequirements.- Assisted with implementation and management of internal and network edge IPS for traffic analysis, malware mitigation, and dataleakage protection.- Performed resource usage and threat analysis as needed using SEIM solution for log correlation.- Maintained test network to simulate live 1 and 10GB environment for integration testing using Spirent test appliances and inhouse created Linux test beds. Manage data compression scripts for log archival.- As needed system and/or network forensic analysis for legal preservation.

Test Engineer: July 2004 to May 2007- Performed internal QA audits for quality control of critical areas within the company. Participated in external audits for FDAClass 3 device compliance and ISO 9001 compliance. Lead findings resolution implementation and mitigation.- Test Lead for multiple Computer Aided Detection systems used for early cancer detection. Participated in design reviews andrequirements planning. Lead regression and hardware equivalency testing.- Developed, maintained, and implemented automated and user-driven test scripts and plans for system and software testingthroughout verification and validation processes. Submitted recommendations to management to management for softwarerelease-to-product. Participated in design reviews, design transfers, and product line traceability actions.- Developed beta and clinical trial test plans for additional functionality to be evaluated in the field.- Oversaw sub-contracted design company for development of UI requirements and final design acceptance.- Trained and oversaw student workers within the Quality Assurance department for product cycle analysis and testimplementation.Software Engineer Co-op: May 2000 to Oct. 2003- Designed and documented medical CAD (computer aided detection) software using UML modeling.- Performed maintenance and functionality upgrades to GUI for cancer detection system.- Evaluated in-house and off the shelf software; generated on-site assembly and system repair procedures.