Donald Rouch Email & Phone Number

Wiesbaden, Hesse, Germany

Lead team of 10 cybersecurity professionals specializing in configuration, enhancement, and maintenance of Elasticsearch, Kafka, Detection Engineering, software application development and RedHat Linux environments,Facilitate strategic collaboration between Defensive Cyber Operations Infrastructure Service Branch, external agencies, and local government stakeholders.Enhance operational efficiencies by leveraging Microsoft Power Automate and AI tools to reduce repeatable, manually intensive tasks.Increase shareholders' visibility and understanding of compliance and operational issues by collecting, shaping and presenting data in Microsoft Power BI dashboards.Oversee requirement analysis and support development of tailored solutions catering to customer needs.Champion professional growth and personal development within team to boost performance and productivity.

Wiesbaden, Hesse, Germany

Engineered automation applications using Golang and JavaScript, integrating with TheHive case management tool, ITSM ticketing system, and GN Rally, significantly enhancing operational efficiency and reporting capabilities.Developed comprehensive web portal in Golang and JavaScript for presenting RCC-Europe incident response data to external customers, featuring functionalities for querying and downloading reports in PDF or CSV formats.Designed and implemented dozens of automated workflows using Microsoft Power Automate, facilitating data queries, notifications, and data presentation through custom PowerBI dashboards to enhance visibility into incident response and threat trends.

Wiesbaden, Hesse, Germany

Managed network of over 200 Linux servers utilizing tools such as SaltStack, Grafana, and GitLab.Developed and maintained robust containerization services using Docker and Podman.Authored and managed Risk Management Framework (RMF) packages for server security compliance and oversight.Developed bespoke software solutions in Bash and other Linux tools, tailoring them to meet specific customer requirements.

Seoul, South Korea

Analyzed dozens of intelligence reports per month on Defensive and Offensive Cyber Operations, supporting non-cyber analysts and leadership. These findings were fed into development of custom rules and other systems for securing the network.Developed custom Anti-Virus, YARA, and IDS rules based on Intelligence reporting. Designed and administered SharePoint sites with custom workflows and interfaces.Provided detailed briefings to senior leadership on Cyber defense status during key annual exercises.

Singapore

Led incident response operations across South Asia, successfully securing a $250,000 engagement with a high profile Philippine-based client.Conducted high-stake client meetings and drafted tailored business proposals.Coordinated logistical management of incident response tools, including Mandiant and FireEye platforms, to maximize engagement effectiveness.

Daegu, South Korea

Established and managed comprehensive enterprise-level forensics and malware analysis program, executing over three dozen missions in South Korea, Philippines, and Thailand.Delivered extensive mission reports to Army leadership, prompting detailed assessments of adversarial capabilities.Developed custom forensic applications and scripts in Python to streamlineoperations.

Daegu, South Korea

Administered critical MySQL and Oracle databases, ensuring high performance and stringent securityMaintained Linux and Unix systems, developing essential applications and scripts for U.S Army Cyber operations.

Daegu, South Korea

Managed deployment and maintenance of 30 Real Secure IDS sensors and their underlying MSQL databases.Configured and maintained 10 Linux and Unix servers, developing web portals and scripts to enhance Cyber operational capabilities.