Brandon M. Email & Phone Number

Remote

Remote

Lead security engineer, Infrastructure HardeningProject owner: Email security system replacement and threat operations support- Replaced legacy email security system with enhanced company-wide replacement with integrated threat intelligence and education support.- Identified and organized (15+) stakeholder teams, conducted needs assessment, and selected replacement solution. Replacement solution was identified without PoC to avoid unnecessary licensing complexity and… Show more Lead security engineer, Infrastructure HardeningProject owner: Email security system replacement and threat operations support- Replaced legacy email security system with enhanced company-wide replacement with integrated threat intelligence and education support.- Identified and organized (15+) stakeholder teams, conducted needs assessment, and selected replacement solution. Replacement solution was identified without PoC to avoid unnecessary licensing complexity and associated cost.- Designed and executed deployment strategy alongside production and corporate engineering teams, accommodating data growth of 500% compared to outgoing solution.- Completely automated malicious email containment and threat removal, data processing, dashboard creation, assignment of updated user awareness training, and email archival processes.- Integrated and expanded existing monitoring and operations tooling to save project cost and complexity, along with complementary services such as Zscaler.- Delivered platform threat intelligence to centralized SOAR and internal intelligence repositories to be utilized across all security teams at Dropbox.Results- Incoming malicious email delivery rate reduced to <1% globally, outgoing "spam" email reduced by 80%, and phishing simulation failure rates reduced to <3%.- Automated email containment eliminated over 95% of email threats within 30 minutes, reallocating security resources for bigger tasks.- Significantly increased partner team functions of detecting platform abuse by providing massively improved threat intelligence; over 75% of the business utilized the platform on a frequent or continuous basis for visibility, and 100% of the business daily for email needs.- Eliminated outdated and risky email use cases and replaced them with safer, approved alternatives.- Improved email reputation by utilizing appropriate email infrastructures best suited for the given workflow. Show less

Remote

Lead security engineer, Infrastructure SecurityProject lead/owner: ExtraHop, Arkime, TeleportExtraHop- Took over and expanded one of the largest ExtraHop deployments of the time.- Developed custom automation to support operation of the platform and conduct maintenance. - Worked directly with ExtraHop to implement feature requests to support projected infrastructure and security needs within the platform.Arkime- Designed and operated a global, OSS… Show more Lead security engineer, Infrastructure SecurityProject lead/owner: ExtraHop, Arkime, TeleportExtraHop- Took over and expanded one of the largest ExtraHop deployments of the time.- Developed custom automation to support operation of the platform and conduct maintenance. - Worked directly with ExtraHop to implement feature requests to support projected infrastructure and security needs within the platform.Arkime- Designed and operated a global, OSS, distributed network packet capture service for all Datto DCs from scratch.- Identified stakeholder teams, gathered requirements, selected technology solutions, and conducted PoC testing before implementation.- Recommended custom modifications to company hardware to save cost.- Deployed system services and dashboards through existing production configuration management.- Dashboard capabilities enabled teams to conduct incident investigation, troubleshoot network performance, and plan capacity upgrades.Teleport- Selected Teleport to replace legacy SSH for secure shell-based workflows.- Teleport infrastructure was also deployed to address operational scalability issues and lack of adequate security controls.Results- Arkime system globally processed > 10 PB of searchable data daily, with the project itself being delivered under budget.- ExtraHop deployment worked harmoniously with Arkime to provide immediate visibility into network security posture and more timely DFIR capability.- Teleport system provided improved device attestation and security controls, improved ease of administration and scalability, and standardized access mechanisms across the business as well as on customer-leased devices. Show less

Cambridge, Ma

Senior System Software Engineer in Test - PlatformSDET for Server Platform engineering (SPE) with a focus on security.- Project owner of Coverity SAST program. Developed business requirements into goals, coordinated task delivery across stakeholder teams, and maintained timelines to remediate defects found in testing. Supported teams to produce more secure code through dedicated training resources, especially for memory-unsafe languages.- Developed and maintained custom… Show more Senior System Software Engineer in Test - PlatformSDET for Server Platform engineering (SPE) with a focus on security.- Project owner of Coverity SAST program. Developed business requirements into goals, coordinated task delivery across stakeholder teams, and maintained timelines to remediate defects found in testing. Supported teams to produce more secure code through dedicated training resources, especially for memory-unsafe languages.- Developed and maintained custom automation to execute routine platform QA and security testing functions efficiently.- Designed and implemented testing code for major platform security features such as secure boot and filesystem changes.- Created PoC for major vulnerabilities that affected the platform, such as Shellshock.Results- Custom testing automation reduced average release testing time from 2 weeks to 1 day. BUs across the company significantly increased release cadence to meet expectations and growth targets. Eliminated blockers to software deployment due to slow testing processes, particularly around security incidents.- SAST program halted release of any code with new defects in it within one month of program launch. Critical software defects remediated within two months. Backlog of non-critical defects addressed within two years to account for volume of fixes to be made. Defects found in third-party code were reported upstream for improved code quality and community engagement.- Tooling for secure boot chain and filesystem integrity provided stronger validation of Akamai system security in all environments, particularly threatened or hostile locations as determined through threat research. Show less

Remote

Developer - Android forensic extraction- Expanded product support for current mobile devices across several geographic regions.- Improved extraction performance and artifact retrieval.- Addressed extraction reliability defects for more stable product operation.

Mullica Hill, Nj

Consultant- Designed a secure Oracle Primavera P6 stack for each client and oversaw its implementation by the client's IT staff.- Trained all client IT staff in operations, management, and support of each platform in accordance with Oracle and Envision best practices.Engineer- Identified and remediated inefficiencies and security defects in corporate IT infrastructure. Deployed enterprise class hardware, automated cloud backup of critical company data, and VPNs for remote… Show more Consultant- Designed a secure Oracle Primavera P6 stack for each client and oversaw its implementation by the client's IT staff.- Trained all client IT staff in operations, management, and support of each platform in accordance with Oracle and Envision best practices.Engineer- Identified and remediated inefficiencies and security defects in corporate IT infrastructure. Deployed enterprise class hardware, automated cloud backup of critical company data, and VPNs for remote and inter-office connectivity.- Developed and operated all GRC and DFIR functions.Results- Improved efficiencies within IT streamlined the department from 4 employees to 2. Longstanding IT issues resolved within 2 months. Average employee productivity raised 40% due to equipment standardization and improved access to IT resources. IT operations costs reduced by 80%- Consulting business operations tripled growth rate of the company into new and existing markets and established a new line of business. Revenue increased 25% YOY. Client support engagements created new ARR stream. Show less

Rochester, New York, United States

Graduate assistant for IST and Computing Security departments.- Instructor and grader for advanced technical lab course sections in the areas of system administration, computer forensics, network forensics, and networking.- TA for open lab sessions to help students complete lab assignments.

Bedford, Ma

Intern - Engineering Excellence- Triaged incoming support requests for RSA software.- Replicated customer environment using VMWare virtual machines for bug fix testing.- Helped start code refactoring and unification process across RSA software products.

Philadelphia, Pennsylvania, United States

Intern - Systems Group- Researched and developed product technical specifications per engineering design criteria.- Developed CAD renderings of design architecture and layout (AutoCAD/Microstation).

Ms

Bs