Currently serving in the Cloud CIRT team, specializing in cloud security incident response.

Packet Deli provides information security consultant services, with expertise in network forensics, security operations, security automation, web3 and smart contract research, vulnerability management, and threat management.I have used this company as a vehicle to perform contract consultant services (e.g., SOC consulting, blockchain forensics, network forensics). Recently redirected my focus to smart contract and web3 security research.

Hired as a SOC lead specializing in cloud security operations. Quickly assigned new role as supervising lead over threat monitoring/detections engineering team.

Formed CDT’s first Network Protection Team (NPT) as its Lead, responsible for all protection systems and solutions of a network with: three 10 Gbps PoPs (asymmetrically routed, geographically dispersed), 100 Gbps WAN (MPLS) and MAN, two large datacenters, one cloud exchange interconnect (Equinix), and over 250 enterprise-sized customers. Manage, update, deploy, troubleshoot, operate, and maintain our IPS and IDS infrastructure (multiple technologies including TippingPoint, Trend Micro Deep Discovery Investigator [DDI], Vectra, Albert, F5 DoS protection systems, and Palo Alto Networks [PAN]). Collaborate with our Network Engineering unit to troubleshoot, investigate, and remediate incidents, and to ensure future designs meet security best practices. Generated our business processes to form our program. I often manage our projects and efforts, drive procurement/contracting efforts, and create solution designs. Built all program documentation and standards from nothing. Mentor the rest of the team on cybersecurity and organization culture. Gather, document, and report on security metrics to demonstrate program success. Regularly work with executives and upper management to support network protection and overall cybersecurity.

Started as a cybersecurity vulnerability management specialist with Security Management Branch, but also performed security incident response and investigation. Discovered insider threats that resulted in prosecution. Subsequent reorganization created a Security Operations unit, and I was placed in the Security Solutions unit to build out our new set of cutting edge security tools. Served as an engineer for various security tools (e.g., SIEM, web filter, TippingPoint and Palo Alto Networks [PAN] IPS, multiple ID systems, vulnerability scanner, security tools infrastructure environment, information security workflow management system, etc.). Collaborated with the California Office of Emergency Services to integrate threat intelligence systems and automate threat management across the state. Wrote information security standards for department wide adoption. Served as lead investigator to numerous security incidents and events, including the use of my network forensic and digital forensic skill set. Produced project documentation and solution documentation, including processes, procedures, and general Maintenance and Operations manuals for sustainable production operations.

Served as IT contract analyst completing the largest (>$100 million) and most complex (multi-staged) contract. Specialized in Statement of Work generation for amorphous system integration efforts. Transitioned into a role of application management for their Electronic Unit Health Record (eUHR) and Dictation and Transcription (D&T) systems. Provided technical leadership in the planning, analysis, design, development, testing, training, support and maintenance of complex, mission critical and enterprise information systems. Participated in a HIPAA breach event.

Led remote teams on various efforts. Designed, developed, and managed full lifecycle for n-tiered application development projects. Served as the senior coder and project manager for back-end development of web-based applications to multiple front-end development clients. Performed security risk assessments of software and infrastructure. Supervised and managed all internal and external resources through execution of each project, including teams of developers or security engineers with expertise specific to each effort. Provided post-breach forensics and investigation services.

Built, customized, and deployed the company’s online marketing system, including click-through advertising software, real-time sales agent chat, and referral marketing software. Recruited marketing partners, generated business partnerships, and managed and refined the entire marketing system.

Support for individual customer’s internet connections. Placed in a lead position after one month. Assisted in the supervision of staff and took the most complicated of support calls. Duties ranged from general administration to technical assistance for the technicians on the floor.

Managed various development teams for major projects. Developed complex web applications including but not limited to: advanced hidden pop-ups, firewall-beating spam engines, check/credit card payment processing and micropayments, renewal billing, affiliate/click-through solutions.

0331 - Machine Gunner. Sent to Advanced Machine Gunner School. Attached to various non-military U.S. agencies (e.g., Border Patrol, DEA, etc.) for short term engagements.