• Conduct forensic analysis of physical devices and other electronic data sources involving internal risks, using forensically sound processes.• Lead proactive efforts to identify, disrupt, and protect AIG from any internal threats that may undermine the integrity and operations of the business.• Provide subject matter guidance and work collaboratively with incident response and other cyber security teams in the event of a cross-functional investigation.• Deliver clear and meaningful results and associated reporting to requestors of various levels across the organization.• Mentor junior level security professionals and periodically perform quality review of their work.• Assist team leadership with the development, collection, and publication of metrics that illustrate team performance and highlight obstacles thwarting team potential.

• Serve as acting manager in the absence of Team Lead• Train and mentor junior analysts to prepare them to work a case from start to finish with minimal assistance• Perform deep-dive forensic analysis, recovering data and artifacts from unallocated space and volume shadow copies• Investigate employees for misuse of government resources, exploiting privileges, and leaking information• Utilize log analysis to assess and identify malicious intent or activity by a variety of subjects, including insiders• Develop an environment to evaluate malware analysis methods and software and future malware analysis• Collaborate with other divisions to conduct a thorough review of employee activities causing harm• Write technical reports summarizing the findings and explaining the results to a non-technical audience• Review analyst reports for technical accuracy, clarity, and proper grammar

• Manage subcontractors, chain of custody, digital media triage, imaging of mobile devices, servers, desktops, and other forms of storage, while working face-to-face with clients• Conduct interviews of custodians and IT support to get a better understanding of where data is stored on the company computers and network• Develop training materials to improve, standardize, and expedite examiner readiness• Train analysts in preparation for onsite imaging, evidence handling, and report documentation and assess their ability to provide a high quality product• Write detailed reports covering the events, circumstances, the collection of evidence, and conversations held regarding the methods and procedures of the onsite support• Assist in the reviewing and updating of ASCLD materials pertaining to laboratory procedures• Support the development of scripts to expedite evidence management

• Led and supported onsite forensic imaging of desktops, laptops, mobile devices, and servers• Authored reports easily understood by someone with minimal computer knowledge, while producing thorough notes, which enabled other examiners to receive identical results• Coordinated with federal agents and traveled cross-country to perform forensic collections• Contributed whitepapers to the lab's knowledge database, documenting proper methods for laborious forensic processes and acclimating to newer, more powerful versions of software• Performed forensic analysis of multiple platforms, extracted data from an array of database types (e.g. financial, medical, etc.), conducted file signature analysis, data recovery, registry analysis, and identified key files to provide valuable data to investigative agents• Effectively utilized regular expressions to capture or redact data of evidentiary value• Identified valuable file types that were not inspected within an Early Case Assessment script, resulting in an update to the script and valuable financial data being recovered• Recovered passwords utilizing data found within files and near custodian workspaces• Processed and ran keyword searches over a multi-terabyte data set for legal review

• Led onsite data collections and forensically imaged hundreds of desktop and laptop hard drives, mail and file servers, mobile devices, and external media• Increased operational and human resource efficiency by improving multiple processes• Generated an idea that reduced a multiple hour process to just a few minutes• Trained new employees within the forensic department on standard operating procedures• Authored whitepapers, which became standard operating procedures within the company• Generated reports and deliverables in accordance with established search criteria• Conducted forensic analysis involving Volume Shadow Copies, the Windows registry, web browsing history, mailbox contents, USB device history, and recovered data• Performed targeted collections when complete device imaging was not permitted or logical imaging when encryption prevented physical disk imaging

• Instructed law enforcement officers on capturing mobile data with the Cellebrite UFED• Evaluated and validated the performance of hardware and software imaging tools, and software employed for conducting forensic analysis• Wiped hard drives to prevent the cross-contamination of data between cases• Retrieved mobile device and SIM card data using the Cellebrite UFED system• Examined digital evidence within various forensic applications

• Managed multiple projects with simultaneous priority deadlines• Promoted additional sales through effective oral communication and customer service• Developed e-commerce websites for notable companies, including a Fortune 100 company

• Setup and managed computer workstations in offices for restricted access • Assisted in research for DARPA's Video Image Retrieval and Analysis Tool (VIRAT) project• Produced video and metadata for universities, Lockheed, Harris, MITRE, & DoD (DARPA)

• Designed and maintained police department website.• Managed and fulfilled customer requests for information regarding sensitive and confidential documents.

• Designed and developed ASP.NET applications and websites to client specifications.• Provided hourly time estimates and worked according to them.• Created and improved multiple websites under strict deadlines to increase customer satisfaction and help generate new business.