Detection engineer responsible for carrying out independent research and reproduction of attack tools, exploits and malware to determine detection feasibility and enable development, enhancement, and tuning of network detection rules as well as new product features for ExtraHop's platform.

--Lead consultant on assessments for small-large enterprise organizations spanning multiple industries.--Conducted external and internal network penetration tests, as well as vulnerability assessments of traditional IT and ICS/ SCADA systems.--Performed credential harvesting and malicious payload style social engineering attacks via email using custom tailored pretexts.--Developed resources for the Red Team, such as report templates and wiki guides.--Assisted customers in implementing and maturing their vulnerability management program using Tenable technology and the MITRE ATT&CK framework. Facilitated PCI ASV scans using Tenable.io to assist customers in fulfilling PCI requirement 11.2.2, and Tenable Nessus to fulfill requirement 11.2.1.--Escalation engineer for the CBI Security Operations Center managed vulnerability management team.--Incident response, malicious activity assessment and vulnerability remediation assistance.

Provided managed network security services for large organizations, aiding in designing, implementing, maintaining and supporting networks within as well as between organizations. -- Provided remote support to on-site engineers and end users/customers.-- Documented issues and followed up with customers using Trax.-- Installed UTM devices from Nuspire as well as FortiNet.-- Assisted with firewall backup, recovery and replacement.-- Upgraded firewalls to the latest stable firmware releases.-- Configured SNMP and syslog propogation on a variety of firewalls including: Nuspire, FortiNet, Meraki, SonicWall, Palo Alto and WatchGuard.-- Fulfilled customer configuration requests such as VPN creation, content filtering, and ISP changeovers.-- Ensured the integrity of high availability network infrastructure by addressing critical issues within a defined SLA such as loss of Internet connectivity. -- Maintained the security posture of network environments by responding to SIEM alerts, such as malware infections, rogue AP detection and brute force attempts.Required configuration and troubleshooting expertise:-- Networking: Routing, Switching (STP / VLAN), TCP/IP, DNS, NAT, QoS, and Wireless (802.11 a/b/g/n).-- Boundary defense: ACLs, IDS / IPS, VPNs (IPSec / SSL), L7 application control and URL filtering.

Assisted customers remotely with Barracuda’s network-based firewall products including the NG Firewall and X-Firewall appliance. -- Documented technical issues, configuration requests, troubleshooting methodology and solutions using Salesforce-- Deployed, configured and cross-trained numerous customers on the NG Firewall and X-Firewall appliance.-- Identified various hardware, software, networking and security issues using UNIX/Linux, Windows, and proprietary network administration tools. -- Assisted customers in updating and creating logical network topologies.-- Made recommendations to IT security procedures, and network design based on knowledge of best practices.-- Performed firewall disaster recovery and replacement procedures.Responsible for vendor neutral as well as vendor specific knowledge and troubleshooting of: -- Network technologies such as routing, switching, DHCP, DNS, VLANs, QoS, NAT and high-availability. -- Firewall technologies such as ACLs, VPNs (IPSec / SSL), L7 application control, URL filtering and role based access control with Microsoft Active Directory.