Craig Oakley Email and Phone Number

- As the Detection Group lead, I was responsible for approximately 26 Tier I and Tier II Detection analysts and smooth work flow of day-to-day activities on the operations floor- Providing real-time security monitoring, data analysis and incident reporting on data gathered by the ArcSight SIM from Snort, SourceFire, Cisco, ISS and AirDefense Sensors- Used data gathered from the US-CERT's Einstein sensors and performed analysis to identify suspicious traffic and made recommendations to… Show more - As the Detection Group lead, I was responsible for approximately 26 Tier I and Tier II Detection analysts and smooth work flow of day-to-day activities on the operations floor- Providing real-time security monitoring, data analysis and incident reporting on data gathered by the ArcSight SIM from Snort, SourceFire, Cisco, ISS and AirDefense Sensors- Used data gathered from the US-CERT's Einstein sensors and performed analysis to identify suspicious traffic and made recommendations to the client to mitigate threats- Involved in scheduling training for analysts, assigning specialized tasks on items such as custom and vendor supplied signature review, working with them on a regular basis to identify any specific training needs and also to identify opportunities for any process improvements.- Responsible for delivering managerial and highly technical analyst level reports to the program manager, client, and executive Board of Directors - Worked closely with the technical writing / process and documentation team in creating new and updating existing SOP with new policies and procedures - Worked intimately with the Advanced Threat Analysis team to help identify Advanced Persistent Threat (APT) - Developed working knowledge of various known actor sets and foreign actors. - Making recommendations for tuning ArcSight, Cisco, Snort, SourceFire and other IDS/IPS devices to limit the number of false positives to the Security Engineering Group - Responsible for assisting the government Watch Officers and end users with discovering the method in which an attacker may have gained unauthorized access on potentially compromised machines, or known compromised machines - Recommend technological and architectural upgrades/modifications to Agency's Information Systems Security architecture - Serve as a technical resource at agency meetings and presentations- Interviewed candidates for open positions and submitted recommendations to the hiring manager Show less

- Providing real-time security monitoring, data analysis and incident reporting on data gathered by the ArcSight SIM from Snort, SourceFire, Cisco, ISS, NFR, and AirDefense Sensors- Reviewing events/incidents escalated by the other analysts for further investigation - Opening tickets on investigated events/incidents and notifying the shift watch officer for further follow up with responsible parties - Making recommendations for tuning ArcSight, Cisco, Snort, SourceFire and other… Show more - Providing real-time security monitoring, data analysis and incident reporting on data gathered by the ArcSight SIM from Snort, SourceFire, Cisco, ISS, NFR, and AirDefense Sensors- Reviewing events/incidents escalated by the other analysts for further investigation - Opening tickets on investigated events/incidents and notifying the shift watch officer for further follow up with responsible parties - Making recommendations for tuning ArcSight, Cisco, Snort, SourceFire and other IDS/IPS devices to limit the number of false positives to the Security Engineering Group - Attended multiple security briefings and Tele-Cons in conjunction with various security agencies. - Developed working knowledge of various known actor sets and foreign actors - Updating self and peers of any new security threats currently prevailing in the field of Information Assurance/Security from various open sources - Participating in the daily end of shift pass down meetings Show less

Worked at FAA

Liaison between DOT and FAA

Worked at DOT