- Conducted penetration tests on nationwide assets. Notable examples include major ports responsible for over $200 billion in cargo annually, international corporations, shipboard networks, repair facilities, shipyards, and related entities such as law enforcement maritime department and fuel suppliers. - Provided detailed reporting of vulnerabilities discovered during penetration testing as well as potential remediation techniques. Reporting allowed customers to remedy issues and ensure accordance with various standards (DISA STIGS, CIS, NIST).- Participated in threat hunting operations across nationwide assets to assist in discovery of potential Advanced Persistent Threats (APTs). - Combined in-depth knowledge of network protocols and operating systems with data analytics platforms to discover numerous undetected compromises and misconfigurations in network architecture across customers’ domains.- Active analyst for incident response efforts across the global US Coast Guard enterprise network addressing critical events- Collaborated with teammates to define best practices and preferred operational network infrastructure for program. The established practices and equipment became national standard for all Cyber Protection Teams.- Assisted in developing and maintaining departmental networking infrastructure and deployable nodes used for customer network interaction. - Ensured proper functionally of core networking service including DNS, DHCP, and SSH inside ofvirtualized environments. - Implemented secure network design principles such as user access controls, encryption on sensitiveinformation in transit and at-rest, and proper implementation of network segmentation and boundaries.- Developed and maintained cloud training environment for peers to ensure availability of training resources. Utilized AWS EC2 instances and open-source vulnerable docker containers. Leveraged security controls applied to a VPC to incorporate challenges into the environment.

- Translated NIST standards into processes for incorporating information security benchmarks into enterprise business practices including USB policy, password rotations, and insecure protocol usage resulting in increased overall security of nearly 100,000 assets.- Executed triaging and reporting on numerous incidents and anomalies across multiple security softwareproducts – SIEM, DLP agents, intrusion detection solutions, and endpoint protection agents.- Performed host forensics to support ongoing investigations into potential attacks and compromises.- Researched external intelligence sources in support of ongoing investigations. Interpretation of threatintelligence sources assisted in attribution of compromises.- Conducted threat-hunting at-scale across nearly 100,000 globally dispersed endpoints.- Created and improved standard operation procedures for SOC daily workflow.- Utilized automation and scripting improve and expedite previously manual procedures. Used PowerShell and Python scripts allowed analysts to save 30-45 minutes on daily basis.

- Monitored networking devices serving over 60,000 global employees including mobile assets.- Administered and maintained global Windows Servers. Routinely updated Active Directory memberships andensured Group Policy updates replicated enterprise wide.- Triaged and investigated network outages. Frequently collaborated with on-site technicians to troubleshootvarious networking devices – routers, switches, microwave receivers, and Windows servers.- Prepared and delivered reporting for senior management regarding statuses of key networking infrastructure.