-Implement signature tuning for over 20 plus tools to ensure minimal false positives for analysts.-Conduct integrated and synchronized Defensive Cyberspace Operations (DCO) intended to project power by the application of force in and through cyberspace by targeting enemy andhostile adversary activities and capabilities.-Defensive Cyberspace Operations (DCO) in order to protect data, networks, net-centriccapabilities, and other designated systems by detecting, identifying, and responding toattacks against friendly networks, in cyberspace and across all domains.-Investigation with a suite of over 20 tools, including Elastic, Tanium, McAfee/Trellix ePO,MDE, Splunk, XSOAR, Wiresdhark, JRSS tool set and many more.-Collaborative investigations with multiple other government agencies to determine specificIOC’s for future investigation or to implement blocking procedures.-Worked with senior leaders in development and implementation of Microsoft DefenderEndpoint for DISA JSP.-Assistance in Yara/STIG implementation by providing technical guidance to secureinformation systems/software that might otherwise be vulnerable.

-Designed and implemented LAN topology, constructed network cabling, installed switches with VLANS, configured routing protocols on a variety of routers to include (i.e. RIP, OSPF, and EIGRP) including access control lists as needed.-Used methods of Incident Response Handling, and worked to develop effective response times. -Participated in numerous Computer Network Attack and Defense procedures that protect Army Information Systems in the Cyber War on Terror.-Functioned as a Network Administrator, Systems Administrator, and ISSO when needed for network communication operations.-Installed network servers, DNS servers, implemented virtual machines (VMs), performed hard drive imaging, configured routers, switches, Enterprise Exchange server, inline encryption devices, and operating systems. -Created User accounts, installed and maintained MS active directory users, groups/computer accounts.

-Analyze troop movements throughout the state of Florida in support of Task Force COVID-19. -Leading a small team of 2-3 individuals in support of operations analysis. -Windows troubleshooting skills. -In depth knowledge of Microsoft office products.

• Collect/analyze event information and perform threat/target analysis for networks, enclaves and systems along with distribute directives, metric reports, and vulnerability threat advisories.• Analyze Packet Capture of Intrusion Detection Systems (IDS) alerts to provide a clear explanation of threat events and how they occurred according to the prescribed reporting procedure.• Provide updates to Standard Operating Procedures (SOP) and coordinate with other government agencies on policies and rules.• Malicious Detection and Assessment using a multitude of tools in a 365/24/7 Security Operations Center (SOC) environment.• Performed ongoing monitoring and threat analysis (IDS/IPS) using FireEye, Wireshark, and other programs.• Focus on determining the Indicators of Compromise (IOC) relating to an event, allowing the ability to support an investigation and harden the network.