Douglas Knowles Email & Phone Number

California

Irvine, California

United States

• Designed and built a custom Splunk SIEM application leveraging over 60+ source types, Splunk data models, and Spunk CIM for correlation and 300+ use cases to drive Security Operation alert prioritization and workflows.• Designed and developed a number of integration into Splunk to support automated response actions and workflows in support of Security Operations.• Designed and built numerous data enrichment applications leveraging Splunk API, custom code, and remote services to provide better context around alerts for Security Operations Analysts.

Herndon, Va

• Worked on a small incubation team to design, architect, and develop a new product enterprise quality code from concept to release. Increased revenue by 15 million in the first year.• Designed, built, and deployed a custom malware analysis environment utilizing 30+ analysis tools, supporting horizontal scaling for large quantity of sample, automating analysis tool update and validation.

Herndon, Va

Alexandria, Va

Redmond, Wa

• Designed and developed a suspicious sample submission processing system to facilitate prioritization and filtering of potential threats. • Developed removal tools for high profile threats including the Sasser and Gaobot worms using C.• Authored many virus descriptions including the Gaobot and Bagle worm families.• Train other analysts in disassembling Win32 binaries, virus replication techniques and proper virus signature selection

Santa Monica, Ca

• Created 200+ virus descriptions including Win32 viruses, Win32 worms, Win32 Trojans, Word macro viruses, Excel macro viruses, DOS viruses, DOS Trojans, Script worms and Script Trojans• Engineered many of Symantec’s removal tools for high profile threats including W32.Bugbear.B@mm, W32.Blaster.Worm, W32.Welchia.Worm and W32.Femot.Worm• Wrote command line scanner designed to detect malicious files.• Served as off-site technical virus consultant for platinum account escalations.

Santa Monica, Ca