Ethan Dotson Email & Phone Number

Fort George G. Meade, Maryland, United States

Developed Concept of Operations. implementation plan and provide program management of the Defense Information Systems Agency (DISA) Cyber Security Service Provider (CSSP) Cyber Analytics Users Group, a bi-weekly meeting that drives and directs analytic development across nine disparate global CSSP offices.Developed and implemented MITRE ATT&CK based heatmap effort of over 400 analytics developed across nine global CSSP offices. Built and delivered multiple Python API Interface for multiple commercial threat intelligence services for automated ingestion into DISA Enterprise SIEM.Built and delivered multiple data parsers to coerce disparate data sources into formats supported by various ingestion pipelines.

Honolulu, Hawaii, United States

Protection Operations, DISA Pacific CISSP countermeasures team lead built and implemented Intrusion detection countermeasures on both GOTS and COTS platforms based on intel fusion team reporting. .

Honolulu, Hawaii, United States

Performed Build, configure, STIG, and manage multiple ArcSight ESM v6.9 deploymentsServe as on site SME for ArcSight and Splunk content management and developmentParticipate in tiger teams focused on root cause analysis of issues

Scott Afb, Illinois, United States

Developed over 400 production python and 200 production BASH scripts to allow junior and intermediate analysts to perform advanced analysis tasks Participated in Next Generation Sensor (NGS) v3 working group developing the OS baseline. Production configurations and custom functionality patches for multiple Open Source software applications Awarded analyst of the quarter, first quarter 2016Developed multiple Python automation tools using RESTful and custom APIsDeveloped custom file parsers for extracting telemetry data from PCAP packet captures using Core Security’s pcapy and impacketDeveloped Python tools to identify potential malware C2/BeaconsDesigned, Developed and Implemented a custom logging solution for third-party commercial software

Honolulu, Hawaii, United States

CDSP Program and Evaluator Scoring Metrics (ESM) SMEConducted site evaluations and self-assessments in preparation of DISA CDSP Accreditation; achieving an overall Level III ratingOperational oversight of a 24/7 operations center with an analyst staff of 15Provide technical training to analysts on tools tactics and proceduresMaintain all TTP/SOP/QRG documentation pertaining to CNDSP certificationsUpdate all internal documentation to be in compliance with current ESMCreated custom BASH and Python scripts to automate repetitive tasksAwarded Contractor of the quarter for the second quarter of 2013

Operational oversight of a 24/7 operations center with an analyst staff of 15Provide technical training to analysts on tools tactics and proceduresMaintain all TTP/SOP/QRG documentation pertaining to CNDSP certifications

Scott Afb, Illinois, United States

CSSP Operations floor analyst at Scott AFB IL contracted to DISA GLobal