• Engineered, implemented, and deployed cybersecurity and information assurance strategies supporting the Western Range Modernization Network contract at Vandenberg AFB. • Led the design and technical implementation of Multifactor Authentication (DoD PKI) via Smart Card logon (DoD issued CACs) across multiple air gapped networks. • Helped design and deploy a standalone PKI solution to issue and authenticate device/user certificates (Certificate Management). • Performed continuous threat hunting against VPN access, SIEM events/endpoint logs, and NGFW network traffic. • Appointed as Incident Response Lead and contributed to the Incident Response Plan. • Helmed the system hardening push across all Windows and *nix systems throughout multiple air gapped networks. • Deployed and managed multiple instances of McAfee EPO HBSS, Tenable ACAS, LogRhythm, and the insider threat application Veriato.

• Drill Status Guardsmen (DSG) - Member of Cyber Protection Team performing Defensive Cyber Operations. • Served as Incident Response Team Lead during the investigation of California State Agencies after the discovery of Solarigate/SUNBURST - Worked with local security teams to preform threat hunting via Splunk, Palo Alto firewalls, and available EDR tools. • Analyzed IDS/IPS, utilize SIEM to perform log correlation and event management, perform traffic analysis, and conduct threat assessments.• Performed network and host-based forensics using tools such as: Zeek (Bro), Suricata, Elastic Stack, Arkime (Moloch), Sysinternals, and Autopsy.

• Member of the Regional Datacenter Engineering team. Managed 1000+ Windows and Linux servers (mix of physical/virtual) supporting all North American business operations. • Oversaw full information system lifecycle in an Agile/DevOps environment - Design, Commission, Integrate, Maintain, and Retire. • Automated tasks via PowerShell and Bash scripting. • Team lead on Vulnerability Management program for all North American Linux systems. Performed vulnerability scans, risk assessments, risk mitigation, and Plan of Action & Milestones (POAM). Reviewed internal and external audit findings and developed plans for remediation. • Administered the Patch Management program for Windows servers via SCCM and Red Hat Enterprise Linux servers via Red Hat Satellite.

• Full-time Federal Technician - Member of Cyber Protection Team performing Defensive Cyber Operations. • Conducted proactive/reactive vulnerability assessments and security hardening. • Analyzed IDS/IPS, utilized SIEM to perform log correlation and event management, performed traffic analysis, and conducted threat assessments.

• Managed 15 critical Air Force Enterprise servers and 200+ workstations. Analyzed ACAS (Tenable) vulnerability assessments and developed plans to remediate findings. • Executed DISA STIGs (Security Technical Implementation Guide) and Plan of Action & Milestone (POAM) development and tracking. • Conducted Risk Assessments and implemented applicable security controls. • Helped stand-up and mature Air Force Enterprise IT Change and Configuration Management procedures according to ITIL industry standards.