Brian Lucero Email & Phone Number

My experience and specialized training have given me unique insight into both the defensive (Blue Team) and offensive (Red Team) security disciplines, enabling me to analyze and solve complex security challenges. Having worked across industries from MSPs, Manufacturing, Healthcare, Cloud Services, Technology, and Banking/Finance, I understand the various and unique risks different organizations face and how to address them. As a senior contributor, I have been at the forefront of taking a proactive approach to security while also driving at meaningful and actionable root cause analysis for existing incidents. I have mitigated and disrupted attacks from APT groups, phishing campaigns, cryptomining operations, and other threats. While serving as a Global Incident Manager, I have assisted in guiding, educating, and improving on existing operational processes and incident response plans. Through my heavy involvement in Purple Teaming, I have developed and managed Adversary Emulation initiatives from planning to full scale exercises, reporting, gap analysis, mitigation, and continuous validation. I have a demonstrated history of discovering and facilitating remediation of critical gaps and risks in organizational security posture. This has often involved creating, testing, and deploying custom IOAs, alerts, rules, and policies in platforms such as CrowdStrike, FireEye HX, Splunk, and Palo Alto. I achieve lasting results through cultivating collaboration between Executive Leadership, Security Operations, Incident Response, Security Engineering, Red Team, Vulnerability Team, and other relevant stakeholders. I continually contribute to the strategic success of the organization by mentoring and serving as an escalation point for junior analysts and engineers, and providing guidance and expertise to other business units in regards to meeting compliance standards, implementing solutions, and otherwise managing risks.Adversary Emulation | Purple Teaming | Penetration Testing | Threat Intelligence | Threat ModelingDetection Engineering | EDR | Malware Analysis | Digital Forensics (DFIR) | Intrusion Detection/PreventionNetwork/Systems Administration | Cloud/Virtualization | Windows | Unix/Linux | SIEM/SOAR | FirewallIncident Response | DevOps/DevSecOps | Leadership | Training | Mentoring | Agile | Scrum | KanbanOSCP | GWAPT | GCSA | CCNA | CCNP | MCSASecurity+ | VMware | Mandiant Security Validation | AttackIQAzure | AWS | Google Cloud (GCP) | IBM Cloud

• 

  Dallas College North Lake Campus

  Business Administration