Daniel Willett Email & Phone Number

Louisville, Ky, Us

Bloomfield, Ct, Us

• Performed collection and analysis of all operating systems logs, network device logs, networkflows, intrusion prevention and intrusion detection, vulnerability assessment, network firewall,web application firewall and virtual environment logs and provide centralized correlation,alerting, log archiving, asset discovery and behavior analysis configuration using an IBMQRadar Security Information and Event Manager (SIEM) or equivalent.• Performed real-time network and system protection, detection and log analysis using SourcefireIntrusion Prevention System/Intrusion Detection System (IPS/IDS) or equivalent sensorscentrally managed with Sourcefire Defense Center console or equivalent providing networkawareness and vulnerability intelligence.

• Performed cyber threat intelligence analysis, correlate actionable security events, perform network traffic analysis using raw packet data, net flow, IDS, IPS, and custom sensor output as it pertains to the cyber security of communication networks, and participate in the coordination of resources during incident response efforts.• Maintained situational awareness of cyber activity by reviewing open source reporting for new vulnerabilities, malware, or other threats that have the potential to impact the organization.• Analyze reports to understand threat campaign(s) techniques, lateral movements and extract indicators of compromise (IOCs).

Randolph Afb, Tx, Us

• Managed largest COMSEC sub-account on Scott AFB, ensuring proper safeguarding, handling, destruction and inventory physical and electronic material.• Supervised and trained 100+ essential personnel on COMSEC handling procedures and ensuring accountability of classified documents and equipment.• Assisted with planning and implementing COMSEC support for projects by providing systems engineering, strategic planning, and security requirements analysis, to ensure the protection of national security information.

Randolph Afb, Tx, Us

• Performed and analyzed network vulnerability assessments.• Conducted software testing for desktops which includes client/server applications, web applications, and Information Assurance (IA)/IA enabled software for certification of software.• Installed and evaluated applications and software while documenting findings collected from software testing and analysis of network packet captures via network protocol analyzer tools (Wireshark/Netwitness)• Established a large array of test lab environments from single host installations to Windows Enterprise AD architecture implementation and firewall configuration to any and all installation requirements to replicate a real world application.• Created and routinely updated operational manuals and instructed new users on Beyond Trust Retina Network Security Scanner, ACAS, Appscan and AFNIC MKRuntest vulnerability scanner.

Randolph Afb, Tx, Us

• Implemented and configured IBM Security Appscan Enterprise using different test policies scan templates and vulnerability remediation advisories to web application security programs.• Maintained IBM Security Appscan Enterprise in enterprise environment and reviewed dynamic scan results to determine whether vulnerabilities can be exploited.• Performed manual assessments to identify vulnerabilities that were impossible to detect with Appscan to determine the extent of weakness in application.• Proposed as well as implemented end-to-end system configuration changes and risk remediation solution paths to secure vulnerabilities.• Compiled results of scan to report to Senior Leadership and software developers to mitigate vulnerabilities.• Accomplished functionality testing on iOS software and web based applications via use of VMWare virtualization software.• Conducted user data audit, reviewing 6.2M items and identifying 25k violations of server suite hosting 85 applications.

Randolph Afb, Tx, Us

• Served as Client Systems Administrator, responsible for setup, diagnostics, and hardware/software configuration for over 250 users and 300+ systems.• Administered Active Directory; performing account and security group creation.• Performed baseline configuration for images and maintained image library; ensuring all images were updated with the most recent updates and updated every 30 days

Bachelor Of Science, Cybersecurity And Information Assurance

B.S., Information Technology

Associates, Information Systems Technology

Information Technology

Education record

Sec030 - Introduction To Hacking, Defense And Response

Sec050 - Application Security

Education record