Performed threat research to identify product detection gaps that exist against the evolving threat landscape. Once identified, gaps were addressed by promoting development of behavioral analytics, curation of signature sets, and development of novel detection capabilities when needed. This research effort included the development, testing and operational deployment of new detection capabilities that directly impacted the product's efficacy. In addition to research, Daniel supported the cyber operations team by providing hunting support and thought leadership to junior level security analysts. Contributions to IronNet expanded outside the threat research team with positive integration with sales, marketing, and other teams.

Member of the founding team at JASK, that helped drive success by running proof of concept engagements with customers. In addition to the primary responsibilities of sales engineering, I was able to make positive contributions to marketing, and product, and recruitment areas as well. Called on many times to give last-minute presentations at conferences, webinars etc. Achieved technical win for many prospects including a large, global industrial powerhouse by running a proof-of-concept that proved the JASK product fit into the corporate and industrial supply line security needs.

Click Security was acquired by Alert Logic in April 2016. After the acquisition, I assisted in the transition of the technology, analytics, and customer commitments to their completion. Support of the Alert Logic data pipeline was also conducted and included training and use of modules written in the Erlang functional programming language.

Responsible for driving customer success via our Analytics & Labs organization with analysis of prospects and clients security telemetry using the Click system. Also heavily contributed features, UI / UX and workflow inputs to the Click engineering teams for future product innovations.- Discovered and responded to numerous security incidents for Click customers and prospects.- Responsible for the architecture, engineering, support and content of the analytics engine driving the Click 2.0 product.- Engineered many built-in analytics for the Click analytics engine, including: DGA Detector, Periodic Timing, DNS Exfiltration, Hostile Fingerprinting etc.- Created hundreds of customized analytics for Click customers and prospects to address their individual security concerns / threat landscape.- Collaborated closely with Click prospective customers during product evaluations (known as: Threat Assessments) to accelerate the Click value discovery. - Worked with the Click engineering teams to drive the direction of the product based on customer engagement, personal experiences and market expertise.

Responsible for monitoring and reacting to intrusions across large MS-Windows enterprise as a member of the US European Command Security Operations Center (EUCOM-SOC). Interacted with higher command authority to coordinate response actions to intrusions. Developed custom solutions to support analysis and forensic activities.- Led team effectiveness increases by implementing analysis processes and procedures, dramatically increasing the maturity level of the USEUCOM SOC.- Engineered BROGREP/INTEX application that dramatically increased the speed by which analyst’s could query and retrieve Bro telemetry data supporting investigations.- Engineered DNS-Attrib application used by all analysts to quickly discover the original source of suspicious DNS requests. - Engineered FRISK application that enabled analysts to obtain rich contextual host-based telemetry of suspicious protected clients that support security investigations.- Introduced BlitzDump toolset that had a dramatic impact on analyst effectiveness, allowing for nearly instantaneous packet trace inspection to support investigations.- Mentored entry level security analysts in security analysis best practices, analysis techniques, and security principles

Responsible for supporting the Defense Information Systems Agency Europe Net Assurance office (DISA-E NA) by responding to internal and external network threats, responding to data spill incidents, coordinating incident response actions between tenant units, and maintaining network security infrastructure.- Engineered BlitzDump application that radically increased the capabilities of analysts. BlitzDump automated the retrieval of packet traces, decreasing the turnaround time for requests from 90 minutes, to 5 seconds.- Implemented analysis processes and automation tools that streamlined tasks and allowed all shift-workers to communicate discoveries and provide a consistent yet flexible response to network threats. - Authored IEEE paper Intrusion Analysis with Deep Packet Inspection - Increasing Efficiency of Packet Based Investigations ISBN# 978-1-4577-1635-5- Awarded the CSC President’s award (2011) for innovation.

Primarily responsible for supporting the United States European Command (EUCOM) by developing, and maintaining over 20 custom applications.- Led Automation team supporting many high-visibility projects.- Engineered the Command Climate Survey web application. The project was a huge success, orchestrated between many teams and culminating in a survey that supporting over 40,000 participants. The project was executed smoothly, on schedule and exceeded every expectation of the Command. - Engineered SwissArmy application. SwissArmy is a agent less, on-demand, host interrogation and configuration application that supported requests from both the security and operations teams.

Lead Analyst for Air Force Computer Emergency Response Team (AFCERT). Responsible for event escalation, analysis, and support of all lower level analysis tiers.- Engineered many automation applications to assist analysis workflows at all levels.- Represented AFCERT at first annual FloCon conference (2004)- Supported Intrusion Detection Engineering and Assessment activities, helping the Air Force evaluate next generation IT security solutions.