Incident Response manager with Saliense working with the United States Marshals Service

· Provide rapid response to urgent Cyber Security situations including emerging threats· Analyze and triage events and implement IOCs collected from trusted partners· Create, manage and track investigation tickets involving SOC and other groups· Engage the appropriate internal and partner groups for remediation· Respond to unusual requests from Federal Leadership, Components as well as some external partnersand route misrouted requests to the appropriate groups· Provide reports for Leadership and internal groups· Identify inefficiencies, streamline and coordinate processes across all shifts· Organize, communicate responsibilities, and delegate tasks based on analysts’ skill sets, whileencouraging cross-training· Create, track, and approve closure of security event notifications.· Directly respond to requests and provide reports to Government leadership

Perform computer security incident response activities for CBP and DHS SOC.* Coordinate with other government agencies to record and report incidents.* Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation.* Perform preliminary forensic evaluations of internal systems. Evaluate/deconstruct malware (e.g. obfuscated code) through open-source and vendor provided tools.* Communicate alerts to agencies regarding intrusion and compromises to their network infrastructure, applications, and operation systems. Assist with implementation of counter-measures or mitigation controls.* Evaluate firewall change requests and assess organizational risk. Ensure the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices.* Prepare briefings and reports of analysis methodology and results. Create and maintain SOP’s and other similar documentation.

* Perform computer security incident response activities for CBP and DHS SOC.* Coordinate with other government agencies to record and report incidents.* Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation.* Perform preliminary forensic evaluations of internal systems. Evaluate/deconstruct malware (e.g. obfuscated code) through open-source and vendor provided tools.* Communicate alerts to agencies regarding intrusion and compromises to their network infrastructure, applications, and operation systems. Assist with implementation of counter-measures or mitigation controls.* Evaluate firewall change requests and assess organizational risk. Ensure the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices.* Prepare briefings and reports of analysis methodology and results. Create and maintain SOP’s and other similar documentation.

* Coordinates with the Information Technology Agency to troubleshoot and process firewall modifications, content switch issues, DNS/VPN related problems, and other network connectivity issues.* Authenticate the legitimacy of incoming/outgoing suspicious network traffic with the Pentagon Computer Incident Response Team and the Air Force Network Operations Security Center; handle and investigate security incidents throughout the organization.* Oversee the identification, containment, sanitization, and reporting of Classified Message Incidents within the HQ Air Force Network.* Disseminate Time Compliance Technical Orders from the Air Force Network Operations and Security Center to system administrators across the HQ Air Force network

* Provide 24 hour x7 day first and second Tier support services for incidents handling and analysis activities for the DoD CERT.* Collecting, researching, validation, ticket input, and close-out actions between the DoD CERT, DISA RCERTs, and Service CERTs.* Monitoring of Netflow activity to determine the status of the Internet Access Points and to determine/verify potential malicious activities on the NIRPNet.* Initial support services for questions and distribution of Information Assurance Vulnerability Alerts (IAVA).* Support services for questions and distribution of the DoD CERTs Anti-virus program.* Develop reports for DoD CERT activities to the JTF, DISA HQ, and General Account Office.* Provide situational briefings to GNOSC, JTF, and Operations management.* Perform corrective actions to network vulnerabilities or problems between the DoD CERT and other DISA directorates such as Network Services and computing Services.

Five years experience supporting the Defense Information System Agency (DISA) and one year deployment supporting Operation Iraqi Freedom received honorable discharge.

* Provisioning machines for Web Hosting sites including: racking, mounting, cabling, labeling, and requesting ports and IP addresses.* Insure data entries on internal databases are done accurately and within established timeframes.* Install OS on Web Hosting servers and configure terminal servers for infrastructure use.* Perform hardware and memory upgrades to Sun and Compaq servers.* Provide the first-level of support for hardware technical issues in the Hosting Center and triage on customer equipment as well as Layer 3 Infrastructure equipment for both internal groups and external clients.* Assist in adding/removing tapes from Backup jukebox; perform initial troubleshooting on problems related to jukebox hardware.* Actively monitor and manage Vantive/Remedy tickets for new site equipment, upgrades, and cancellations to insure that equipment needs are identified and addressed within the appropriate timeframes.

Three years experience as a member the 231st Combat Communications Squadron telephone operations support team.