Dana Lyons Email & Phone Number

Charolette, Nc

Penetration testing of network, application, and hardware devices for the Cyber Security division of the Enterprise. Using both manual techniques, and tools such as Metasploit and web attack proxies. Performed manual penetration tests of several applications that span both Intranet and Cloud network landscapes. Initial introduction of the Pentest team's Capacity Maturity Model (CMM) using a custom PPT framework. Training associate team members in manual testing methods, such as browser DOM inspection, and CSRF proof-of-concept.

United Kingdom

Emphasis on APT detection and mitigation functions with over 9000 endpoints in the Enterprise. Leading the build-out of Advanced Threat Modeling and Threat Hunting capabilities in the Threat Intelligence ecosystem. This includes the development of Threat Modeling labs (Red Team, and Blue Team exercises), and adapting current tool sets to take advantage of TTP and IOC discovery.

London, United Kingdom

Live experience in handling Chinese APT threat actor. Cyber Security incident response and forensics. Gained experience with advanced persistence methods used by threat actors, such as DLL injection and autoruns. Metasploit and Armitage Teamserver utilized in assessment phase of security lifecycle. Network security reviewer tasked with firewall review and risk/change management.

Performed on-site penetration testing of company office buildings. Live simulation of building site infiltration and data exfiltration Red Team exercise. Development of tools and methodologies used in the assessment of physical, and embedded device security; Including: Mobile phones and wireless access points. Conducting security assessments in web applications, mobile applications, and wireless infrastructure. Burpsuite and Fiddler web attack proxies, Armitage, Cobalt Strike, IDA Pro.

Boise, Idaho Area

Audit code using static and dynamic code analysis as part of product acquisition, and appropriate security methodologies to be employed. Virtual team member of application development teams. Performed analysis of complex functional and business requirements to determine security ramifications.

Hopkinton, Ma

Q2 2011 Global Technical Services MVP awardTraining of new EMEA Greenplum Support team in Cork, Ireland. Gained expert level knowledge of Brocade 8000 series switches, and the Brocade Fabric OS (FOS). Hadoop Greenplum integration, and Map/Reduce Java framework. Instrumental in the stabilization of 160 node, and 176 node clusters, the two largest Greenplum customer installations. Review and author Greenplum technical solution articles.

San Mateo, Ca

Direct, hands-on support of multiple financial and government entities, including: FINRA, NASDAQ, Federal Reserve Bank, Sears Holding Co., and the NSA.Responsible for bringing most of the Solaris Greenplum cluster problems to resolution.Project lead for implementation of an Enterprise-level document search index.Responsible for training new support personnel and refining support procedures.Manage problem tickets and ticket escalations for a highly complex database cluster product. Clients include many large corporations who are interested in cutting-edge data mining and data warehousing capabilities. Filed 246 bugs with Greenplum Development. Gained expert level knowledge of the Solaris OS, ZFS, Sun x4500 class servers, and ILOM in clustered environments.

Boise, Idaho

Designer and manufacturer of custom aluminum enclosures for the DIY audio enthusiast community. Parts manufactured by Small Parts Manufacturing (SPM), and Triax Metal Products in Portland, Oregon. Commission builds of custom hifi equipment for individuals and businesses.

Appointed as the Partner Connectivity Services Business Analyst (PBA), supporting HP’s $28 billion Imaging and Printing business unit and data center transformation. This unit consists of over 200 applications and provides services to over 50,000 employees worldwide and over 100 million customers.Managed over 80 partner connectivity migrations without any impact to revenue. These were commonly leased-lines or VPN solutions. Performed application security assessments for over 100 applications. Targeted methodologies were used, including the use of commercial scanning tools, CSRF, XSS, and SQL injection techniques for Java and .NET applications. Created remediation plans in order to help application teams resolve security issues and to implement stronger security solutions. Reported and followed-up on multiple security violation incidents to HP’s Corporate IT Security Incident Response Team.

Authored the IT Information Security Policy and managed the Identity and User Management System project.Developed patch management policies for Windows, Linux, Oracle and SQL systems. Gathered authentication and authorization schemes for all hosted applications in preparation for a unified directory source (Federation). Trained in HIPAA, NIST Special Publications, ITIL, and ISO-17799.

Authored an authentication proxy for GroupLink using LDAPS, Java session cookies and perl/cgi. Implementation of the Blackberry Enterprise Server for Novel GroupWise.Developed the configuration and documentation for deployment of Apple Xservers to all elementary schools in the district. This includes integration of Open Directory and Samba services on OSX to LDAP services, provided by Novel E-Directory. Application customizations for the migration of helpdesk services from HelpStar to GroupLink Helpdesk.

Cooperated with the Department of Defense in providing them with evidence of compromised data on University hard drives.IP registration for over 1600 hosts in several domains and the maintenance of over 2400 user accounts. Services managed on RedHat Linux include: DNS/DHCP, Apache (name-based virtual hosting), courier (maildir based email). Managed a SunFire 880 running Solaris 5.8, which serves Cadence to thin clients in the VLSI (Very Large Systems Integration) lab. Clients used both Windows and UNIX or Linux workstations interchangeably in the Engineering department, thus interoperability is a skill I have applied extensively in order to provide a more efficient environment. I developed and maintained an account synchronization service between Windows AD servers and UNIX NIS servers and utilize Kerberos for password management across platforms. Professors and research students consulted with me to provide them with guidance on highly complex projects. Some of these projects include: Beowulf system operations, CVS and bugzilla, web database portals, data harvesting and statistics.

Bachelor Of Science, Zoology, Emphasis In Ecology

Activities and Societies: 2002 – President of WSU’s Amateur Radio Club

Bachelor'S Degree, Ecology And Evolutionary Biology