• Participate in and at times lead customer-facing engagements to advise and implement AWS services.• Hands-on experience on architecting and securing on AWS using IAM, KMS, CloudTrail, CloudWatch, Config, Secrets Manager, GuardDuty, Security Hub, Lambda, etc.• Created automation templates, utilizing CloudFormation, Terraform, and Python; to deploy and configure resources in the AWS environment.• Recommend security solutions that increase the customer’s security posture based on business objectives and outcomes.

• Investigated incidents generated by Azure Sentinel scheduled analytics • Modified out-of-box Azure Sentinel analytics and created custom analytics in order to close identified coverage gaps• Created Azure Logic Apps in an effort to automate some tasks analysts conducted while generating a ticket• Developed Azure Workbooks that helped analysts run routine queries more efficiently and provide leadership with tenant configuration data• Assessed current tenant security configurations and settings; recommended changes/improvements to the administration team to implement

• Investigated malicious phishing emails, domains, and IPs traversing the DoD Enterprise Email using Splunk and Open Source tools• Stayed current with threat intelligence on adversarial APT/adversarial groups’ Computer Network Exploit (CNE) campaigns, behaviors, tactics, and capabilities as related to network security threats• Investigated security incidents by hunting for malicious activity and conducting log analysis using Splunk• Coordinated with the Countermeasures team to implement various blocks for in order to protect against malicious email, network, and web traffic• Performed basic analysis on malware used in phishing campaigns that are found traversing the DoD Enterprise Email

• Performed 24x7x365 monitoring, incident response, problem isolation, and remediation coordination for network and server events• Monitored various DoD customer's servers through alerts generated by Sourcefire IDS/IPS • Analyzed PCAP data during routine investigation of alerts in order to identify any potential malicious network traffic• Generated reports and communicated any incidents to the appropriate customer contacts

• Successfully completed the Joint Cyber Analyst Course (JCAC), a demanding 25-week course that has a 26% attrition rate. Graduated JCAC with a 94% GPA, the third highest in the class of 20 students.• Participated in a 5-day Cyber Protection Team (CPT) exercise designed to simulate a response to an active cybersecurity incident through the stages of Survey, Secure, Protect, and Recover. • Trained and demonstrated proficiency in key elements of host and network analyst CPT roles which requires knowledge in file systems/permissions, common OS processes protocol analysis, header structures, and identifying anomalies in network traffic.

• Responsible for disseminating the weekly Information Assurance Vulnerability Management (ICVM’s) to the appropriate Intelligence Community elements in a timely manner.• Responsible for reporting the individual agencies current vulnerability compliance figures.• Coordinated with the watch floor and Common Tools Team to maintain an up to-date patch repository and ensure Windows Server Update Services (WSUS) availability for Intelligence Community elements.• Performed open source research daily to keep abreast on new and emerging threats to the Intelligence Community.

• Provided support to Defense Intelligence Agency (DIA) Human Intelligence (HUMINT) collection management and targeting efforts by creating and processing collection requirements in order to help drive intelligence collection and fill gaps.• Acted as the subject matter expert regarding HUMINT, and liaised with analysts to identify intelligence gaps and provide strategic assessments to senior policymakers.• Routinely participated in Intelligence Community deep dives aimed at improving collection capabilities, collaboration, and achieving goals.

• Mid-level all source intelligence analyst responsible for monitoring worldwide Iranian Threat Networks’ potential threats to the homeland and U.S. interests abroad for the DIA.• Demonstrated ability to fuse intelligence information from multiple sources including; HUMINT, Signals Intelligence (SIGINT), and Imagery Intelligence (IMINT) in order to build finished intelligence products on a broad range of political and military issues.• Showed excellent communication skills when required to compose and deliver responses to complex questions in a clear and concise manner.

• Trained and certified instructor at the Source Operations Course (SOC); a 7-week DIA course designed to train DoD employees in properly conducting Category II Military Source Operations at the HUMINT Training – Joint Center of Excellence (HT-JCOE).• Conducted verbal critique, retraining, and written evaluation of student performances following the completion of each students’ exercise.• Identified and analyzed any issue regarding students both academically and personally and then devised and executed appropriate solutions.

• Deployed to Afghanistan in support of Operation Enduring Freedom XI-XII. Performed duties as a HUMINT Collector in support of Special Operations Forces with Naval Special Warfare, SEAL Teams Ten and Two.• Provided US Military with information about enemy forces, capabilities, and intentions. Conducted source operations and interrogations of non-US persons, handled captured enemy documents, and performed intelligence analysis to fulfill intelligence requirements.• Conducted daily intelligence briefings apprising the leadership, team, and support personnel of latest intelligence developments, trends, and threat activity.