• Analyze individual binaries, firmwares, and software systems for vulnerabilities• Research novel exploitation techniques• Develop exploits against known vulnerabilities • Develop automation systems for increasing developer productivity in vulnerability research and exploitation activities• Lead a successful dynamic team that received accolades from end customers• Theorize, Research, and Develop state-of-the-art capabilities to ensure mission success• Plan and Orchestrate the creation of a secure, dynamic network to house developer activities

• Author blog posts to boost BAH’s technical capital and reputation.• Design and engineer CTF frameworks to administer across national conferences.• Design and engineer advanced CTF challenges. Mentor other teams in BAH on offensive trends and methodologies. • Rapidly prototype Proof of Concepts (POCs) to demonstrate market viability to firm executives. • Research and exploit low-level Windows kernel structures and kernel drivers.• Assist the firm’s 5G research team in discovering flaws and vulnerabilities in the 5G specification.

Member of the Strategic Innovation Group DarkLab Advanced Threat Hunt Team.• Develop threat hunt plans for client networks• Interface with new clients and develop long-term business relationships• Conduct Cyber Threat Intelligence and determine attack groups that target clients• Determine the most efficient way to detect exploits in a network• Developed high-efficiency code that focuses on run-time and compilation speeds to improve the platform

Consultant to USAA:• Develop detections from both well-defined and open-ended security vulnerabilities. • Develop Proof of Concepts to test vulnerabilities and exploits, as well as responsiveness and false-positive rates of detections. • Use industry standard tools such as Phantom, HX, SysInternals Suite, and Wireshark to develop detections. • Program and support software to assist in threat hunting and detection development. • Hunt threats across a 50k endpoint environment to find evil. • Reverse-engineer binaries to build detections and deny access to our environment.

• Worked with third-party vendors to stand up security products. From the first contact, to purchase, to installation and maintenance, bridged the gap between the vendor to best address security concerns in the enterprise environment to secure the network.• Created signatures by identifying and reverse-engineering malicious files and malware.• Reprogrammed the production Mail Filter from the ground up to support new processes making it faster and more powerful with additional features and workflows. • Conduct Proof of Concepts of vulnerabilities and exploits to determine security risk.• Increase speed and efficiency of scanning tools, enterprise-wide.

• Conducted analysis of malicious emails from following network flow to reverse-engineering malware. • Established as the point of contact for other analysts in reverse-engineering activities.• Identified code and security flaws in mail filter.• Supported new SOC Transformation projects by working with multiple vendors to stand up security products.• Improved code-base to new technologies to improve speed, accuracy, and safety of code.

• Established compatibility with third party software products by developing programs for modification and integration. • Developed an open-source library for creating charts and plots.

Contractor to Pfizer:• Automated analysis workflow revolving around endpoint detections, sandbox results, email scanning, and IMS platforms. • Streamlined the phishing analysis to an almost analyst-free experience.• Created scripts to execute actions based off analyst inputs from isolating endpoints, to hashing directory trees, to sandboxing malware and returning results.• Worked with industry-standard investigation tools such as FireEye’s HX and NX, Splunk, EnCase, FTK, IBM’s Resilient, IDA Pro, tcpdump, and WireShark.

• Managed creative projects from concept to completion.• Consistently met deadlines and requirements for all production work orders.• Developed and implemented complex Internet and Intranet applications on multiple platforms.• Established compatibility with third-party software products by developing programs for modification and integration.