Ben S. Email & Phone Number

Hanover, Maryland, United States

• Detect analyze and respond to threats, anomalous or suspicious activity to systems and data.• Collaborate with internal security partners to create, identify, prioritize, and research signatures for suspect behavior. • Track the progression of signatures from concept to production. • Establish a baseline for testing/retesting signatures to confirm effectiveness. • Iterate and improve signatures as new information/techniques are identified. • Assist CIRT team with Monitoring. • Perform Incident Response investigations. • Create Monthly Reports for Leadership, and Report case status to CSWO.

Dos-Ds

Attended meetings for multiple interconnected IA/IR teams, gathering complaints, requirements and challenges they faced and proposed solutions for those challengesDeployed COTS applications to cloud environments (Azure), developing documentation, processes and COOP plans Explored options to ease pain points, and smooth workflow, including testing, budgeting, and deployment once approval was obtained Explained options to government leadership, laying out the pros and cons of decisions they might select

Arlington Va

• As Shift Lead duties included quality assurance, refining processes, approving block requests, training analysts to follow processes• Responsible for daily, weekly and monthly reporting as well as briefing IHB Lead, and Government leadership as incidents develop on a daily basis • Conducted Investigative Search Requests, to respond to FOIA requests from legal • Preformed computer forensic analysis using various tools.• Identified unauthorized activity on DoD networks and develop effective remediation strategies to mitigate known vulnerabilities• Conducted network monitoring and detection analysis using the latest security intrusion detection tools technologies and methodologies• Preformed open source research on emerging threats, recommends blocks and technical solutions to prevent vulnerabilities from being exploited• Maintained Remedy queue addressing specific customer complaints related to the security stack

Arlington, Va.

• Worked as part of a team, with rotating on call responsibilities, utilizing tools including: Tanium, Arcsight Logger, Bluecoat reporter, and HBSS.• Responsible for NDCI (spillage), PII, and Security incidents (malware/spear phishing)• Created user awareness presentations to highlight emerging threats for Joint Staff users• Evaluated and updated SOP’s for incorporation into a workflow management tool designed for specifically for Joint Staff Incident Response• Interfaced directly with end users while collecting evidence and offering guidance as to how to achieve their required tasks without violating existing security policy

Quantico

• Provided technical support of identification, resolution, and tracking of computer intrusions and other computer security incidents/events• Conducted incident handling, and systematic analysis of computer intrusions• Performed computer system analysis using software and/or various log collector tools• Evaluated network traffic, intrusion detection system (IDS) logs, firewall/router logs, system logs, and other forensic data to determine if systems have been compromised• Analyzed evidence of compromise and recommended mitigation strategy • Functional and technical experience with system and malware exploits• Detailed understanding of current known hacker methodology, exploits and vulnerabilities

Alexandria, Va

• Observing Intrusion Detection and Prevention Systems on daily basis through ArcSight SEIM to ensure that the network is safe from malicious threats• Assisting and providing feedback on improving current Standard Operations Procedures (SOPs) to better support the Cyber Security Mission• Utilizing and evaluating multiple open source and proprietary tools to conduct both static and dynamic malware analysis

Alexandria, Virginia

•Conduct detailed analysis of security requirements for both new systems and the modification to existing systems, and provide reports, guidance, and recommendations to the appropriate IAM’s.•Conduct vulnerability assessment scans (Retina), DISA Gold Disc scans (OS hardening), and provide detailed analysis of all Pentagon backbone network systems ranging from stand-alone servers to Installation Campus Area Networks.•Provide data, compliance metrics, and participation in regular meetings with government staff addressing any IA issues and concerns.•Provide support to relevant IAM’s in the Accreditation and Certification of the various networks, to include interviewing system owners, analyzing network diagrams and data flows, the creation of POA&M’s, and validation of 8500.2 controls in accordance to all Army Regulations.• Provide technical system support for all system owners in an effort to obtain system accreditation, or increase the overall security posture of the networks.•Voting member of the eRFC process which include patch approval, the addition of new systems, and decommissioning of systems on the network etc…

Alexandria, Virginia

* Authored the ITA Security Classification Policy and Matrix* Created SOP's and Policies based on existing DOD guidance and end user input* Edited documents for Team leads * Identified processes in need of documentation* Created Visio "Swim Lanes" flow charts to assist "Visual learners" in understanding new and complex processes and procedures* Authored weekly reports for Team Lead to submit to upper management

• Responsible for desktop support duties include troubleshooting, researching and documenting solutions for future use• Creates, modifies and manages User Active Directory accounts• Configures, tests and deploys, new and refurbished computers to company standards• Troubleshoot network problems including VPN access for remote users• Creates Virtual Machines using ESXI for testing purposes

• Managed the Northern VA. office • Maintained and updated personnel files that included new hires and current employees • Managed vendor relations, invoicing, bill payment and expense approvals• Managed tech support issues for multiple locations• Coordinate MCP’s schedule acting as his assistant, and perform project management • Performed P&L analysis including project-related purchasing • Functioned as the final authority in regards to customer complaints and vehicle breakdowns

I Troop 3/3 Acr

Bachelors, Network Security

Activities and Societies: Phi Theta KappaComputer Science

Associate Of Applied Science, Network Security

Activities and Societies: Phi Theta Kappa

Education record