•Provided defensive operations, alert fidelity, and security monitoring services for the Naval Surface Warfare Center. Defended Secret and Unclassified data on the Department of Defense Information Network (DoDIN).•Conducted cyber defense operations involving vulnerability assessments, traffic analysis, incident response, threat hunting, forensics, and vulnerability scanning. Tools used include Splunk (SIEM), ACAS (Nessus), HBSS (McAfee ePO), and OSINT.•Identified and reported trend analysis for MITRE ATT&CK and Cyber Kill Chain techniques on all cases that were opened. Reviewed DoD cyber threat intelligence and open-source intelligence from various sources (CISA, NSA, JFHQ-DoDIN, USCYBERCOM, FireEye, etc.) about trending threats, attack vectors, APTs. and TTPs.•Streamlined the security operations systems processes by 20% by developing custom SIEM correlation search queries, dashboards, analytics, and reports for security tools such as: Splunk Enterprise Security (ES), Azure Sentinel, Elastic/XSOAR, Microsoft Defender for Endpoint, McAfee/ESS/HBSS, Nessus (ACAS) etc.•Performed in-depth investigation of SIEM alerts, network traffic, emails, PCAP, and user activity to determine if an incident had occurred. Documented investigations and generated end-of-shift reports for analysts on duty.•Created a robust training plan for the team including Standard Operating Procedures (SOPs) and Work Instructions (WI) resulting in modernized system processes and enhanced business continuity by 20%.

- Provided Tier 1-3 on-site and remote technical support, problem resolution, and troubleshooting to 10,000+ end users for all hardware, peripherals, mobile devices, and software systems that had been turned over to the ITS support structure on a $300 million service contract.- Documented, tracked, escalated, and monitored incidents via the Service Now ticketing system to ensure a timely resolution. Utilized Active Directory, VPN, and remote desktop access software to assist end users in account creations and troubleshooting problems.- Regulated access to safeguard classified information and devices. Assisted in creating a boot server to automate desktop imaging for workstations and laptops. Conducted Security Technical Implementation Guide (STIGs) checklists on clients and servers to maintain security automation compliance.- Developed and implemented effective Classified Message Incident (CMI) data spill and security incident plans to maintain the integrity and confidentiality of computer files and secured devices against unauthorized modification, disclosure, and destruction.- Verified newly imaged devices met the criteria for approval and accreditation to be added to the network. Installed, imaged, and performed unit maintenance on all NIPRnet multi-functional/multi user information processing systems, software, hardware, peripherals, mobile and auxiliary devices to include conducting layer 1 network troubleshooting of Ethernet cables, media converters, and fiber cables.

- Provide technical support for desktop systems, addressing hardware and software issues in a timely and efficient manner.-Install, configure, and troubleshoot desktop hardware and software components to ensure optimal performance.- Collaborate with end-users to understand and resolve technical issues, providing excellent customer service and support.

- Provided Tier 1 helpdesk technical and remote support to 9000+ regional end users for all hardware, peripherals, mobile devices, and software applications on the network enclave.- Resolved client issues ranging from virus and malware detection, endpoint protection, server patch maintenance, data restoration, system diagnostics, operating system imaging, and software installation.- Maintained and managed the Active Directory environment (Object Management) to include creation of user accounts, objects and security groups, and password resets.- Reduced security risks by 20% through the administration of access controls to ensure compliance and the protection of personally identifiable information (PII) for all patients.- Conducted IT asset management through Service Now and created tickets in Remedy to document user calls and all technical services that were performed.- Developed weekly knowledge base entries to train end-users and team members on troubleshooting and known problem mitigation efforts. Implemented a quarterly training program designed to educate the organization’s end users on cybersecurity best practices.