Christopher Wightman Email & Phone Number

Belle Haven, Va, Us

Mclean, Va, Us

• Senior SIGINT Malicious Behavior Discovery Analyst for U.S. Army INSCOM performing Unattributed Threats Discovery and SIGINT support to Defensive Cyber Operations missions.• Lead a team of 14 threat hunt and malware analysts in support of U.S. Army and National Agency intelligence priorities.• Conduct Threat Hunt activities based on hypothesis informed by both friendly and threat intelligence, as well as technical expertise.• Combine data from multiple databases and tools into actionable information to identify malicious cyber activity by nation-state cyber threat actors.• Identify and track observable activity throughout the Cyber Kill Chain through the development of highly refined signatures, focused query strategies, and deep packet and protocol analysis.• Leverage the Diamond Model to pivot off adversary, capability, infrastructure, and victim information to form a comprehensive understanding of the threat.• Conduct basic static and dynamic malware analysis to identify indicators of compromise, command and control infrastructure, and ultimately threat actor attribution.• Incorporate processes and tools to elevate the organization from HMM3(Innovative) to HMM4(Leading) according to the Hunt Maturity Model.• Authored Jupyter Notebooks to automate time consuming analyst tasks and improve analytic accuracy and efficiency. • Implemented multiple programs for analyst development and automation to improve the functional capabilities across all teams and mission sets in the organization.• Support the management of contract deliverables, day-to-day on-site operations and resourcing, and staff management.

Mclean, Va, Us

• Provide systems and network engineering support for the Defense Intelligence Agency, Office of Counterintelligence, Special Activities Division.• Developed and managed customized virtual machines to satisfy unique regional and security requirements.• Engineered a Virtual Desktop Infrastructure (VDI) using VMWare ESX server integrated into an existing Microsoft Active Directory Domain.• Provide system security certification and accreditation support in the development of the System Security Plan (SSP) for a mission critical client network.• Transition client system accreditation plan to ICD 503 Risk Management Framework (FMR) format for submission into DIA’s Xacta portal.• Develop and submit the System Security Authorization Agreement (SSAA) for the extension of Joint Special Operations Command (JSOC) JIANT network.

Mclean, Va, Us

• Lead Technical Planner and Analyst for EUCOM’s Combined Endeavor program.• Responsible for the engineering, installation and maintenance of the CE conference network to support up to 350 users participating four annual conferences at venues throughout Europe and Eurasia. • CE Communications Syndicate Lead included the planning, installation and maintenance of the CE 2012 tactical network, telecommunications and audio visual capabilities.• Directed 30 technicians from Puerto Rican Army National Guard and US Air Forces Europe 1st Combat Communications Squadron to provide network administration and security support.