Benjamin Lehr Email & Phone Number

Denver, Co, Us

Burlington, Massachusetts, Us

Austin, Texas, Us

Longbow (fka TalonX, fka Cambrian Cyber) develops and provides cyber automation solutions, consulting and managed services to help organizations better leverage their cyber personnel, improve cyber effectiveness and efficiency, and drive better insights from security data, all with the goal of reducing the threat of a damaging cyber breach.

Atlanta, Ga, Us

-Develop SIEM system from scratch using Demisto, Splunk ES, UBA, and Carbon Black. This system processes over a terabyte of data daily to produce only 20-50 suspicious events. SOC analysts process and respond to these events within Demisto.-Taught myself SOAR tool Demisto. Build and maintain Demisto playbooks that run through hundreds of enrichment steps, utilizing Splunk, CarbonBlack, Qualys, JIRA, AD, Aruba, NMap, Anomali ThreatStream, VirusTotal, PaloAlto Autofocus, and WildFire. Playbooks cover every kill chain step. Playbooks output tables that make decision-making simple and fast. As a result, one entry-level contractor can triage all daily events. Playbooks provide a single pane of glass analysts use to scan suspicious endpoints using SEP and Qualys, block external indicators in MineMeld, and ban malicious hashes in CarbonBlack. -Work SOC incidents in Demisto and QRadar. Caught and escalated penetration testing attempts, demonstrating security monitoring effectiveness. Tune and enhance output from ES and UBA, cutting false positives and improving analyst workflow.-Lead cyber risk reporting. Produce monthly reports for board and government. Present to CTO. Work with business partners to update reporting methods. Train and supervise intern on risk data collection.-Analyze vendor cyber risk using external rating agencies RiskRecon and BitSight. Advise non-technical stakeholders on results and communicate with vendors to address potential risks. In this process, have remediated many vendor risks. Work with diverse technical groups to coordinate response to OFI vulnerabilities BitSight and RiskRecon discover. As a result, several BitSight categories rose from D or F to A scores before we stopped using this service, and our RiskRecon score rose from 8.0 to 9.1.-Wrote Python script that leverages cyber tool APIs to verify security agent coverage. Script provides data enabling near-complete coverage for cyber agents that were previously partially deployed.

Built fences, herded bison, properly disposed of environmentally hazardous waste, operated heavy machinery.

Develop partnerships for a top annual regional solar conference, research for settlement cases between the solar industry and the electric utility.

Provo, Ut, Us

Generate sales leads door to door for a residential solar company in Denver. Recruit and train peers, help produce training materials, connect Brio to well-established partner businesses.

Boston, Ma, Us

As competitively selected Fossil Free Fellow for 350.org, worked with two environmentally oriented non-profit organizations training and coordinating volunteers, facilitating meetings, and circulating petitions to impact the outcome of anti-hydraulic fracturing ballot initiatives. Researched and wrote a paper on the potential environmental impacts of hydraulic fracturing in Denver’s watershed.

As a member of a collaborative, contributed to the programming, graphic design, and game design of Sow/Reap, a digital art installation inviting the audience to explore the impacts of opium poppy cultivation through play. Sow/Reap was selected for DiGRA's Blank Arcade in August 2014.

Denver, Colorado, Us

Created social media content, built web pages, recommended changes to website design workflow, and integrated digital technology into events.

Spread Teens4Oceans’ message through effective web design and web content management, Facebook and Twitter presence, and flash game design.

Bachelor’S Degree, Environmental Studies

Education record

Education record