David J. Email & Phone Number

Mckinney, Texas, United States

• Led the establishment and optimization of SOC operations, implementing advanced threat detection strategies, significantly reducing response times to security incidents• Diligently reviewed an average of 250 user tickets per month, ensuring timely resolution and adherence to security protocols• Conducted thorough assessments of all IP and domain blocks before implementation, minimizing potential risks and ensuring alignment with security objectives• Skillfully triaged and routed GSA user tickets to the appropriate security team, facilitating efficient incident response and resolution• Contributed to the development of the SOC Guidance of Assigned Tasks (GOAT), providing clarity and direction for team members in their daily responsibilities • Developed How-To training videos for SOC and Incident Response Teams

• Monitored and assessed security alerts from prominent sources such as US-CERT, FireEye, and iSight Partners, offering actionable recommendations for targeted attack mitigation and infection remediation • Efficiently managed security alerts from multiple sources, including US-CERT, iSight Partners, Wildfire, and internal channels• Contributed expertise to manual penetration testing initiatives, employing advanced tools such as Kali Suite, Metasploit, and Core Impact• Established prompt incident response for the General Service Administration (GSA) to support a workforce of over 16,000 • Assisted in outlining SOPs for the Incident Response team to streamline response processes• Developed and executed an Information Security Continuous Monitoring (ISCM) strategy aligned with NIST SP 800-137 guidelines, generating management reports and ensuring proactive threat detection• Defined security requirements and contributed to the development and publication of official Security Policy documents essential for managing GSA Networks and Applications securely

• Provided 24/7 support for IDS/IPS monitoring and contributed to the development of robust information security documentation and policies, collaborating closely with the InfoSec Team• Spearheaded quarterly scans of systems for OWASP Top 10 vulnerabilities; created comprehensive guidelines and standards for IT systems to provide ongoing coaching to team members• Played a pivotal role in improving the organization’s security posture against cyber threats through tier-one malware and APT analysis and response