David Knife Email & Phone Number

Nottingham, Md, Us

Nottingham, Md, Us

As a Cyber Security Manager, I lead a dedicated team in implementing robust security measures, analyzing threats, devising strategies, and managing security projects to safeguard organizational assets against cyber risks across cloud and user endpoints. My role involves a multidisciplinary approach, ensuring proactive defense measures and swift responses to emerging security challenges.- Vulnerability management- Endpoint detection- Threat hunting, threat simulation, insider threat- Project management- Cloud security- Vendor management- Security awareness training- Compliance management- Penetration testing- VPN management

Maryland, United States

- Conducted comprehensive audits aligned with PCI-DSS and NIST frameworks for clients, ensuring adherence to industry standards and regulatory requirements.- Submitted detailed audit reports highlighting security gaps and vulnerabilities, providing actionable recommendations for mitigation strategies.- Successfully launched phishing campaigns as requested by clients, simulating real-world attack scenarios to assess and improve employees' awareness and response to phishing attempts.

- Spearheaded all aspects of security engineering, encompassing penetration testing, threat hunting, and intelligence gathering, to fortify the organization's defenses against cyber threats.- Provided expert-level architecture support, ensuring that security measures were integrated seamlessly into the organization's infrastructure to mitigate risks effectively.- Developed and maintained NIST/IAM documentation, ensuring compliance with regulatory standards and facilitating clear communication of security policies and procedures.- Performed application penetration and security guidance as part of the software development lifecycle (SDLC)

Baltimore, Maryland Area

- Insider Threat: Following the presidential executive order, our team designed and built the insider threat framework and alert rules for the US Army. Once the platform was in place our team was able to review insider threat behavior and act accordingly.- Threat Hunting and Adversary Research: Led proactive threat hunting, analyzing over 14TB of data daily from thousands of endpoints and foreign adversary campaigns. Leveraged insights to fortify security infrastructure, enhancing resilience against cyber threats.

- Serve as team lead for penetration testing team- Perform penetration testing and reverse engineering on unmanned aircraft components- Develop and complete guidelines and action reports for senior officials

- Executed penetration tests against client networks and applications, producing comprehensive reports and proof-of-concept demonstrations of vulnerabilities.- Collaborated with clients to develop and implement mitigation strategies to address identified security weaknesses and secure systems effectively.- Shared threat intelligence findings through intelligence briefings to management and Security Operations Center (SOC) analysts, enabling informed decision-making and proactive defense strategies.- Enhanced proprietary tools and signatures with actionable data and actor Tactics, Techniques, and Procedures (TTPs), facilitating more effective threat detection and response.

Aberdeen, Md

- Built and maintained over 300 Red Hat systems worldwide including web servers, clusters, intrusiondetection systems, vulnerability scanners and security centers· Regularly trained new hires and other team’s personnel on aspects such as troubleshooting,maintenance and system configurations· Server as the Information Assurance Security Officer (IASO) for the client· Maintain DISA STIG compliance on all DoD systems within the CSSP, including vulnerability and SCAPscans.· Prepare and maintain documentation for the DISA Risk Management Framework (RMF)

Aberdeen, Md

- Utilized proprietary SIEM based on Snort to perform in-depth analysis of network data, enabling the detection and investigation of potential security incidents.- Generated detailed reports for stakeholders, providing insights into network incidents, their impact, and recommended courses of action for remediation.- Spearheaded the implementation of a training and certification environment, establishing a standardized program for new analysts to enhance their skills and knowledge in cybersecurity practices.