David J. Email & Phone Number

Mckinney, Texas, United States

• Led the establishment and optimization of SOC operations, implementing advanced threat detection strategies, significantly reducing response times to security incidents
• Diligently reviewed an average of 250 user tickets per month, ensuring timely resolution and adherence to security protocols
• Conducted thorough assessments of all IP and domain blocks before implementation, minimizing potential risks and ensuring alignment with security objectives
• Skillfully triaged and routed GSA user tickets to the appropriate security team, facilitating efficient incident response and resolution
• Contributed to the development of the SOC Guidance of Assigned Tasks (GOAT), providing clarity and direction for team members in their daily responsibilities
• Developed How-To training videos for SOC and Incident Response Teams

• Monitored and assessed security alerts from prominent sources such as US-CERT, FireEye, and iSight Partners, offering actionable recommendations for targeted attack mitigation and infection remediation
• Efficiently managed security alerts from multiple sources, including US-CERT, iSight Partners, Wildfire, and internal channels
• Contributed expertise to manual penetration testing initiatives, employing advanced tools such as Kali Suite, Metasploit, and Core Impact
• Established prompt incident response for the General Service Administration (GSA) to support a workforce of over 16,000
• Assisted in outlining SOPs for the Incident Response team to streamline response processes
• Developed and executed an Information Security Continuous Monitoring (ISCM) strategy aligned with NIST SP 800-137 guidelines, generating management reports and ensuring proactive threat detection

• Provided 24/7 support for IDS/IPS monitoring and contributed to the development of robust information security documentation and policies, collaborating closely with the InfoSec Team
• Spearheaded quarterly scans of systems for OWASP Top 10 vulnerabilities; created comprehensive guidelines and standards for IT systems to provide ongoing coaching to team members
• Played a pivotal role in improving the organization’s security posture against cyber threats through tier-one malware and APT analysis and response