Eric Barber Email & Phone Number

Front Royal, Va, Us

Designed vulnerability mgmt. program to address regulatory recommendation and meet current industry standardsStood up SOC while operating as the Senior Analyst (L4), Intel Analyst, VM SME, and Ops Consultant Managed 20-person SOC team with minimal turnover due to feedback loop established and mgmt. supportDeveloped controls with an audit firm resulting in decrease in risk to the bank and transparency for the business Organized and ran use case workshops with an external audit firm resulting in increased intel and insight into threats Ensured deficient services (vendor-driven and Global office) being delivered to the US were known and remediated Built relationships with business, backoffice IT, and global counterparts culminating in the advancement of the program Built a training program to onboard analysts as part of 3rd party service management Created and led the Vulnerability Rating Forum Analyzed and reported evidence and metrics for regulatory, audit, and controls testing Fielded requests from regulatory bodies (FED, NFA, Fintech, etc.). and provided evidence of policy compliance Performed analysis and incident response for potential and confirmed incidents to include malware analysis, OSI, containment, gap analysis, forensics, APT attribution, etc. Performed impact and severity analysis of threats based on bank security postureProvided security recommendations/approvals for change requests based on risk appetitePerformed gap analysis of the bank’s security capabilities and recommended policy & technology changes to bridge identified gapsCreated process documentation surrounding security practices, procedures, appliances, approvals, requests (SLX, Remedy, ServiceNow) and SOPs for daily operational activitiesAnalyzed alerts from security appliances (FireEye, Sourcefire, Splunk SIEM, Symantec DLP, CarbonBlack EDR)Collected and analyzed vulnerability dataFacilitated vulnerability remediation with the business application and infrastructure teams

Herndon, Va, Us

Wrote an accepted proposal for the acquisition of analyst workstations and OOB net as part of an overall SOC solution Key decision maker for security program contractor employee selection Created a training program for miliary SOC team members as part of initial SME contractor team Designed SOPs for various job functions (use of analysis tools, rules and use of OOB, malware analysis, data collection tools, etc.) Coach and instruct USCG incident handlers in various analysis techniques and to determine severity and impact of network incidents at a Tier III level Managed incident response and malware analysis

Saved over $1M leveraging existing relationships to procure analyst workstations and analysis tools Created synergies with a senior federal agency which resulted in CGI Federal being seen as the industry SME One of the initial creators of the first Analyst-to-Analyst group sharing forum to share synergies Conducted response and analysis to an average of 250+ incidents per month (10-15 per day) Promoted from junior to senior analyst and subsequently trained new team members Analyzed network data for intrusion and malicious behavior (PCAP analysis, NetFlow) Performed hard drive (dead box) analysis to determine infection vector of malware Utilized various tools to collect and analyze data (malware, PDFs, Office documents, etc.) Prepared technical malware analysis and intelligence fusion reports to the DoD security community Assisted Tier III personnel in their efforts to mitigate intrusion attempts against their respective organizations Leveraged previous experience and relationships in HQDA to quickly resolve incidents and determine ownership of resources on the network Utilized various sandbox tools (FireEye, GFI Sandbox, etc.) for triage analysis Worked in a Tier III capacity for all US HQDA-related incidents requiring response and reporting Wrote technical and procedural standard operating procedure (SOP) documents

New York, Ny, Us

Obtained 5 IT certifications in 2 years, exceeding other peers’ knowledge level Served as the primary technician to the Secretary of the Army and his office Implemented organizational practices to improve the efficiency and accuracy of IMB. Managed accounts on the HQDA Network and in Active Directory Accountable for server notification & alert responses Installed and performed troubleshooting of both hardware and software on the HQDA Network (scanners, MFP's, computers, etc.) in NIPR and SIPR environments Performed troubleshooting and maintenance of Blackberry user configuration Established and maintained professional relationships with various government customers Assisted multiple VIP's both in the Pentagon and HQDA Performed troubleshooting of desktops, laptops, and other various IT equipment