Brandon Larson Email & Phone Number

Bahrain

• Coordinate C-UxS SME support for two Carrier Strike Groups and ten Missile Class Destroyers (DDG) during high-threat transits and attacks by providing critical operator training, robust system support, and execute true left-of-launch I&W resulting in negated or minimized adversary damage.• Direct and facilitate cross-functional collaboration among various military components within the Intelligence Community, including NAVCENT, ARCENT, AFCENT, NSA TOPI, CTF-1050, and CAOC to provide a comprehensive, near real-time understanding crucial for strategic decision-making in dynamic military operations.• Exploit a variety of intelligence sources, including FISINT, COMINT, IMINT, MASINT, and other relevant channels, to optimize data cohesion and offer a thorough and detailed understanding crucial for strategic decision-making in dynamic military operations.• Conduct ongoing Pattern of Life and network analysis of FISINT and COMINT selectors to develop proven left-of-launch (L2) indicators, actively contributing to predictive threat assessments and enhancing the effectiveness of early warning systems.• Assist technical staff to formulate and apply mathematical modeling and other optimizing methods to develop and interpret information that assists management with decision making, policy formulation, or other managerial functions.

South Carolina, United States

Defense Threat Reduction Agency (DTRA) Capability and Data Integrator • Worked alongside a Cyber Threat Analysis Team to identify external network nodes for use in non-kinetic, cyber targeting. This required extensive knowledge of Digital Network Intelligence methodologies to utilize Intelligence Community tools that focused on metadata and non-SIGINT data. This direct support resulted in 10 network nodes between 3 facilities of interest. • Coordinated with Senior Analysts and Target Offices of Primary Interest (TOPI) to develop new analytic workflows that answered intelligence gaps by exploiting the existing minimized SIGINT data to provide unique pattern of life analysis. This, in coordination with the other IC teams, helped confirm trends of Theater Ballistic Missile and Air operations that provide left-of-launch indications. • Worked closely with the client to solve complex problems with a variety of solutions that required a technical understanding of tool development and communicating within the IC like Task Force units operating in the same AOR. Continued coordination and mentorship were essential to inform junior and senior analysts alike of the new tools or capabilities so they may become self-sufficient in their analysis.• Trained Air Force analysts in a bi-monthly pre-deployment training schedule on the use of DTRA tool suites, SIGINT fundamentals, and how this information is used in the targeting process of their CENTCOM target networks. The workflows introduced were a fusion of minimized COMINT, non-SIGINT metadata, and all-source reporting to that helped automate daily steps taken by the deployed analysts.• Tools and data utilized while fulfilling the Capability and Data Integrator position:o DTRA VOLTRON and Attack the Network Tool Suite (ANTS)o DataXplorer,o Jupyter Notebooks,o JEMA models,o JIRA Instances,o GEOINT query tools,o All aspects of SIGINT data (COMINT, ELINT, and FISINT),o And NGA or other agency level tool suites.

Beale Afb, Ca

• Provided support to Air Combat Command’s Intelligence Surveillance and Reconnaissance (ACC ISR) operations utilizing multiple Full Motion Video (FMV) tools to produce intelligence products. • Achieved Screener qualification due to an ability to communicate timely and concise analysis to the flight crew and ground forces that provided informed analysis of real-time activity.

Ft. Gordon, Ga

• Produced over 60 tactical SIGINT reports a day in a near-real time support for deployed forces, utilizing knowledge of the CENTCOM AOR to provide target continuity and situational awareness.

• From around March to May 2016 and as the senior analyst, provided direct support to MARSO operations in the CENTCOM AOR that was coordinated with 2nd Party Cyber operations to exploit targets’ COMINT equipment. This required knowledge of the network infrastructure to identify where the data originated and how to incorporate DNI workflows to develop the target and pass back to MARSOC.• Worked in a 24hour operational reach-back support center, assisting in aspects of Communication Intelligence (COMINT) production, to include analysis of high value threats to U.S. security, near real-time reporting, and briefed operation reports and summaries to tactical level commanders.• Managed the production of serialized SIGINT products from the identification of information, to dissemination in accordance with established requirements and policies. Completed RPTG3225-Reporting Bootcamp twice during the four years active duty serving as the senior reporter for tactical and EGRAM reports. Weekly EGRAM reports were produced alongside daily tactical reporting to provide target continuity and situational awareness.• Performed sustained target analysis and enhancement through DNR and DNI networks to create analytical assessments that mapped the target’s network, identified HVI, and Pattern of Life analysis.• As a senior analyst from 2016-2018, I operated independently, managing a team of analysts and tools to search, identify, and monitor (COMINT) networks involving high value threats to U.S. security in a dense and dynamic work environment. • Tools and data utilized while fulfilling the TDNA position in the Corpso DataXplorer,o JEMA Models,o XKeyscore,o EGRAM and tactical reporting tools,o And network display models like Analyst’s Notebook (ANB)