Eric M. Email & Phone Number

Navarre, Fl, Us

Washington, United States

Bremerton, Washington, United States

-Senior member of the Computer Incident Response Team (CSIRT). Ensuring cyber incidents are effectively detected, analyzed, mitigated, and reported in a timely manner. Ensuring that organizations accurately executes its delegated cyber preplanned responses, and meets both internal and external reporting timelines. -Battle Watch Captain during CCORI Cybersecurity Compliance audit and other DoD Red Team events. Leading the Cyber Operations Branch to be highly successful in the detection, analysis, and mitigation of the Red Team’s activity that has received Flag-Level acknowledgement and stated that we set the standard for all U.S. Naval Shipyard for Cyber Defense. -Utilized my knowledge of cyber intrusion tactics and analysis models, such as the Cyber Kill Chain and MITRE ATT&CK Framework, and Diamond Model to create a behavior detection scheme utilizing Splunk rules by analyzing known Tactics, Techniques, and Procedures (TTP) of Advanced Persistent Threats (APT). -Lead for enterprise Information Assurance Vulnerability Management (IAVM) Program ensuring the continued compliance with Information Assurance Vulnerability Alerts (IAVA), Bulletins, and technical advisories throughout the life-cycle of the information systems. Ensure that the execution of cybersecurity vulnerability scans and application of security patches. Tracking newly released IAVAs to ensure system administrators are patching and mitigating latest vulnerabilities. Uploading ACAS scans and vulnerability actions to VRAM for DoD compliance-Utilize Security Information and Event Management (SIEM) tools like Splunk ES, Phanton, and Solarwinds SEM to perform threat hunting activities. Looking for indications of compromise, emerging threats to the network, users, and the protected information.-Aggregated PSNS Cyber Incident Response SOP’s and created PPR’s for cyber events to increase the effectiveness and timeliness of network defenders.

Hawaii, United States

•Lead analyst and IC Target SME for client's high priority SIGNIT Development target mission, responsible for daily analysis, DNI mentoring, collection management, digital network characterization reconstruction and mapping, senior level briefing, and target knowledge transfer to local client and broader IC partners.•Routinely briefed NSA/CSS Hawaii, USPACOM and JFHQ leadership on their high-priority OCO enabled mission as their SME for mission objectives, effects and assessment and the lead action officer for interagency coordination and leveraging joint assets. Successful mission resulted from planning and executing over 24 months using 30 personnel from DOD, IC and allied partner relationships and assets.•Performed numerous Collection Management strategy sessions to improve collection of mission data across multiple collections sources and different geo-graphical locations. Utilized multi-agency partnerships and sharing agreements to increase mission success.•Conducted advanced analysis of multiple-data sources with a strong understanding of the principles and methods of exploiting foreign communications and communication systems to collect, characterize, and identify vulnerabilities in C4ISR networks.•Participated in Joint Planning Groups, Operational Planning Teams, and other B2C2WGs, as well as production of intelligence products, to facilitate and support Offensive Cyber Operations (OCO). •Organized and provided both formal and informal training sessions for DNI, newly developed tradecraft, and target knowledge transfer. Produced detailed living documents for local client and IC partners to ensure target knowledge and community collaboration.•Developed analytic tradecraft of raw and fused SIGINT to geolocate targets and identify their TTPs for the purpose of reporting, follow on analysis, and recreating target environment visualizations, from analysis of Full-Motion Video, OSINT, and National databases.

Hawaii, United States

• Provided continuing support to SOCPAC J6 leadership planning sessions for current and future DCO activity for both SOCPAC HQ and forward deployed network assets. Ensuring that both SOCPAC HQ Staff and operational units have timely and secure communications. • Advised SOCPAC's Leadership on current and possible malicious activity so commander could make informed decisions about network risk to Special Operations Forces infrastructure.• Provided expertise in McAfee’s ePO and subsequent modules, including Host Intrusion Prevention System (HIPS), Policy Auditor (PA), Rogue System Detection (RSD), and Virus Scan Enterprise (VSE).• Implemented and configure software to detect and/or prevent malicious activity at host level.• Employed HBSS, Intrusion Detection System (IDS), and network monitoring capabilities enterprise wide and field activities to correlate and analyze all-sources of counterintelligence (CI), network monitor/performance data, data, and other information to provide an integrated capture of computer/network incidents• Provided indecent response and reporting for intrusion detection and policy violations.

Hawaii, United States

• Analyzed and tracked intrusion set capabilities, intentions and supporting infrastructure to improve SIGINT tasking and collection.• Monitored and assessed phishing scams, viruses, malware, hacking, and other threats. Notified Senior Watch Officers and implemented improved security measures to counter threats.• Used packet analysis, SNORT and other Intrusion Detection Signatures to perform advanced analysis.• Strong ability to perform static and dynamic analysis relevant to CNO and SIGINT tools and databases used for the customer mission to discover exploitation activity that was of an unknown or suspicious origin.

Hawaii, United States

• Used knowledge of adversary activities in cyberspace with an understanding of intrusion set tactics, techniques, and procedures (TTP) to improve SIGINT tasking, collection of Foreign CNE activities, target capabilities, and identify emerging APT to U.S. government assists. • Lead DCO analyst in demanding new mission to discover exploitation activity that is of an unknown or suspicious origin. Used packet analysis, SNORT and other Intrusion Detection Signatures for multiple platforms to perform advanced analysis.• In direct support to the NSA Technical Director, routinely participated in software development planning committees and delivered both user and customer feedback to development team for advanced DCO analytic tool creation.• Provided numerous briefings to high level leadership and Flag Officers on current or emerging cyber activity as well as train junior personnel in DCO and OCO tradecraft. • By name requested to deploy to USFK for proof-of-concept DCO/OCO exercise, CYBERPILOT. Success of exercise resulted in newly developed agency tools, training of USFK DCO analyst, numerous lessons learned, and increased partnership amongst the DCO/OCO community.

Naples, Campania, Italy

• In close coordination with Commander, 6th Fleet and his staff. performed weekly strategy meetings to synchronize AOR-specific C4ISR assets. Conducted pre-planning for transit of various US Navy platforms throughout the sixth fleet battle space to include liaising with multi-national coalition forces.• Provided ashore system engineering and technical support for systems supporting Command, Control, Computer, Communications, and Intelligence (C4I) for real-world operations and exercises, and Maritime Domain Awareness in Maritime Operations Center and intelligence centers of the U.S. Navy and its partners. • Provided engineering feedback to the program office used to develop comprehensive maritime picture derived from multiple data sources using automated fusion tools, anomaly detection capabilities, and web scraping, collaborative tool sets, and effective Net-Centric data management strategies.• Ensured and validated backups and data restoration processes and procedures for all managed systems.• Implemented RETINA scanning software to ensure that patches from the Department of Defense Information Assurance Vulnerability Management (DoD IAVM) program were properly implemented.• Provided system analysis and network engineering support for the following U.S. Government Systems: Comprehensive Maritime Awareness (CMA), Tactical Extended Maritime Intercept Operations (E-MIO) System (TES), Google Earth Enterprise, Global Command and Control System Maritime (GCCS-M) Combined Enterprise Regional Information Exchange System (CENTRIXS)• Performed testing and configuration management of INMARSAT equipment and securing of mobile VPN.• Conducted tool training to users as well as general analytic methodology to enhance mission outcomes.