Brian Ruth Email & Phone Number

Chantilly, Virginia, United States

• Monitor logs, security events, and endpoints. Technology stack includes Cortex XDR, Splunk, Microsoft Defender, Wiz, Mimecast Admin portal, Stairwell, VirusTotal, Microsoft Encase, Microsoft Copilot for Defender.
• Complete daily event analysis and triage to determine if events qualify as legitimate security events or non-incidents. Monitoring and tuning of alerts within the environment to increase alert fidelity and accuracy.
• Lead incident response efforts, including investigation, containment, and resolution.
• Conduct post-incident analysis and implement corrective actions to prevent future occurrences.
• Evaluate the security posture of vendors and third-party partners.
• Work closely with the IT team to ensure that security controls are integrated seamlessly into the technology infrastructure.

Sterling, Virginia, United States

Monitor logs, security events and endpoints. Technology stack includes Splunk, ScienceLogic, and Tenable Security Center.Complete daily event analysis and triage to determine if events qualify as legitimate security events or non-incidents. Monitoring and tuning of alerts within the environment to increase alert fidelity and accuracy.Manage team.

Washington DC-Baltimore Area

Conduct full range of advanced professional duties required to monitor network activity, document and report on information security issues and emerging trends Provide threat and vulnerability analysis Monitor endpoint protection/detection for anomalies using designated escalation paths for remediation Review and monitor Security Information and Event.

Arlington, Virginia, United States

• Produce timely, fused, all-source cyber operations intelligence and/or indications and warnings intelligence products (e.g. threat assessments, briefings, intelligence studies, country studies).
• Evaluate threat decision-making processes and generate requests for information/ intelligence to identify threat tactics and methodologies.
• Monitor and report changes in threat dispositions, activities, tactics, capabilities, objectives, etc. as related to designated cyber operations warning problem sets.
• Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
• Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities. Distinguish these incidents and events from benign activities.
• Determine tactics, techniques, and procedures (TTPs) for intrusion sets. Recommend computing environment vulnerability corrections.

Sterling, Virginia, United States

• Supports 24x7 Security Operations Center in a federal law enforcement agency. Conducts all-source intelligence research on emerging threats, advanced persistent threat groups, and geopolitical activities which could.
• Investigates suspicious activity to determine if therat actor-related via TPPs and known IOCs.
• Leverages tools including DBProtect, Tenable, Nagios, Splunk, Cisco FirePower, Lookout, and Best Practical Request Tracker to ensure proper security posture for numerous endpoints.

Vienna, VA

Supports a 24x7 Security Operations Center (SOC). Responsible for Intrusion Detection Systems (IDS) monitoring and analysis, analysis of network traffic, logs analysis, creation and tracking of incidents until completion.

Placed within a cabinet-level federal departmentResponsible for supporting the Computer Incident Response Team through continuous monitoring and use of a ticketing system. Works with CIRT to monitor tools, procedures and documentation to regularly process and report Incidents. Responsible for reporting and processing Cyber Events to the Tier II team while.

Under general supervision, responsible for moderately complex tasks typically relating to network monitoring, operations, installation, or maintenance. Handles routine network activities and identifies and resolves routine network problems.

Sterling, VA