David Rogers Email & Phone Number

Mclean, Va, Us

• Lead a team of 5 Cybersecurity Engineers in securing a financial management system that processes over 60 billion dollars of government funds• Create, update, and maintain servers including Nessus scanners, Security Center, Splunk, Security Onion, Symantec Endpoint Manager, Symantec Endpoint Agents, and Burp Suite application scanner servers• Create, analyze, and respond to SEIM alerts in Splunk, Security Onion, and Kibana• Monitor and investigate Symantec Endpoint Protection HIDS alerts for windows and OSSEC HIDS alerts for Linux • Engineer Suricata IDS rules and Yara rules to detect malicious and unauthorized network activity utilizing tcpdump, wireshark, and scapy • Conduct web application scanning utilizing Burp Suite for 10 environments as part of the software development life cycle• Conduct OS scanning utilizing Nessus for 10 environments including Windows 2022, Oracle Enterprise Linux, Oracle Databases, F5 Load Balancers, ESXi clusters, Cisco Firepower, routers, and switches as part of the software development life cycle • Utilize Python, Powershell, and SQL scripts for automating patching tasks, account anomaly detection, and server management • Maintain compliance with the NIST SP 800-53 Rev 5, and FISMA by leading audit evidence gathering and interviews with auditors • Coordinate patching and mitigation of audit findings across multiple teams including Database, Network, System Admin, and Application Development• Create POA&Ms to track patches and requirements that require a larger timeline for completion • Maintain cybersecurity documentation deliverables including system access, network processes, patch management, PII data management, and change control SOPs• Provide guidance for cybersecurity initiatives such as implementing zero trust, IPv6 transition, FISMA assessments, and role based trainings

Columbia, Maryland, Us

• Lead a team of 8 Cybersecurity Analysts and Data Scientists in hunting for malicious and unauthorized host and network traffic• Perform cyber hunting for anomalous or malicious activity in customer data sets up to 20 petabytes in size• Search for IOCs and associated TTPs identified via OSINT and internal intelligence. • Create detection rules for monitoring unauthorized and malicious activity• Utilize the MITRE ATT&CK matrix for tracking TTPs used by APTs and other cyber threat actors.• Assist customers with cyber requirements and provide solutions• Create technical presentations with cyber hunt findings for senior leadership • Train users of the BDP trough bi-weekly technical presentations for 50+ Air Force civilians and contractors

Columbia, Maryland, Us

• Data Scientist for the Air Force BDP (Big Data Platform)• Create Kibana dashboards to visualize data of interest • Analyze, enrich, and parse data feeds including Zeek, Palo Alto Pan-OS, Windows EVTX, AWS Cloudtrail, AWS VPCFlow, O365, Cisco Router, McAfee HBSS, Kubernetes, Netflow, AppGate, Tanium, Blue Coat Proxy, PowerShell and more• Standardize data fields across multiple data feeds for better analytic queries• Create Python scripts utilizing pandas, numpy, and regex to parse various file types including json, xml, yaml, and csv • Gather requirements for data analytics • Map various data feeds to the Elastic Common Schema

Apg, Md, Us

• Lead a team of 4 DCO analysts in hunting for malicious and unauthorized host and network activity• Work closely with senior leadership for defining monitoring requirements • Assign duties based on monitoring requirements• Recommend and implement improvements to monitoring capabilities • Lead incident response investigations• Test for efficacy of proposed Snort rules to be added to the IDS • Publish monthly cyber threat research to be used throughout DoD• Lead troubleshooting and problem solving a wide variety of client issues.• Recommend courses of action to prevent and mitigate intrusions.

Apg, Md, Us

• Analyze and evaluate anomalous network and system activity utilizing Microsoft Sentinel, and the ELK stack (Elasticsearch, Logstash, Kibana)• Monitor intrusion detection systems using Snort and other proprietary IDS/SIEM tools • Monitor Azure, AWS, o365, and ServiceNow cloud environments via a dedicated Elastic server• Create Snort rules to match malware and unauthorized activity signatures from OSINT and IOC• Utilize tcpdump, sed, awk, and grep for pcap analysis • Develop and modify scripts to monitor network traffic using Bash, Perl, and Python in a Red Hat Linux environment.• Create technically detailed reports based on intrusions and events.• Provide assistance in computer incident investigations

Fairfax, Va, Us

• Maintained Dell EqualLogic SAN's, Avocent KVM, and Dell PowerEdge servers housing a VMware vSphere client, VMware ESXi cluster, Oracle databases, SharePoint 2016, and other administrative servers.• Performed weekly tape backup via Veritas NetBackup.• Conducted weekly ACAS scans against the network consisting of 50 servers and 15 workstations.• Maintained compliance with HBSS including HIPS and other tools in the HBSS suite.• Maintained Active Directory by adding and removing users and computers as needed.• Maintained Group Policy by adding GPO's to our organizations OU• Implemented monthly OS, and software patches on the servers and workstations via WSUS, remote PowerShell, and SCCM maintained by the hosting site.• Tracked IAVAs and POA&Ms as applicable to the servers and workstations on the network.• Ensured network health by maintaining a WhatsUp server.• Tracked installed software and software versions by maintaining a TrackIt server.

Fairfax, Va, Us

• Software Engineer for a Java EE web application deployed on Oracle infrastructure in a virtualized environment and integrated through web services with a distributed Windows .NET (C#) desktop application. • Object-oriented software analysis and design, service-oriented architecture, web services, software development lifecycle, and application lifecycle management. • Java, Oracle products, Microsoft .NET C#, Microsoft TFS, SharePoint, Crystal Reports.• Coordinate with multiple teams and organizations, including the Tier III Service Desk, and Quality Assurance.

Oak Ridge, Tn, Us

• ORISE summer internship with U.S. Army Material Systems Analysis Activity • Created a full stack web application using Java as the back end to connect to an Oracle database and XHTML, CSS, JavaScript, and Java Server Faces for the front end.• Created multiple tables in the Oracle database using SQL to be referenced throughout the web application.• Participated in weekly Scrum meetings and presented the final project to senior leadership.

Columbia, Md, Us

• Converted a static HTML/CSS website into a WordPress framework where a content manager could edit content without seeing a line of code. • Used PHP to create a interactive job posting board that deleted cells when there was no content in them and adds cells when there is content.• After the summer internship concluded, I received an offer to stay with the company through the school year.