Frank Galambos Email & Phone Number

Fulfills ISSE role by tracking and reporting vulnerability metrics weekly to stalkholders. Manages timelines for critical reports, including vulnerability scans, software releases, ATOs and conditions. Expert with creating and following POA&Ms based on the organization's SOP. Responsible for expertly classifying and disseminating sensitive information on a need-to-know basis and per classification guidance.• Orchestrates multiple weekly meetings to ensure the timely release of third-party software, maintaining efficiency and adherence to schedules.• Demonstrates expertise in system migration across diverse environments, ensuring seamless transitions and minimal disruption.• Possesses in-depth experience with the Software Development Life Cycle (SDLC), proficient in agile and scrum frameworks to drive project success.• Expertly categorizes vulnerabilities, ensuring accurate assignment to the appropriate action plans and enhancements.• Leads the team in vulnerability management, providing constructive feedback and guidance on assigned tasks to optimize performance.

Founder and Lead Researcher of MalDork Security Research LLC, specializing in malware analysis and research while focusing on Cyber Threat Intelligence (CTI), comprehensive training programs, and publishing detailed articles about cyber attacks.• Established and grew a cybersecurity research company, driving innovation and excellence in the industry.• Provided expert CTI services, delivering actionable insights to clients for enhanced security measures.• Developed and conducted advanced training programs to upskill professionals in cybersecurity best practices.• Authored and published in-depth articles on newly discovered malware, contributing valuable knowledge to the cybersecurity community.

Tampa, Florida, United States

Performs CONMON and ASR actions in accordance with DoD and Air Force regulations. Manages user accounts to include password recovery and remedial training. Tracks data storage and destruction to ensure compliance with local laws and standards. Manages vulnerabilities and guides vulnerability management program through ACAS scans and Trelllix end point solution. Experienced in working in sensitive networks and maintains proper sanitation to prevent unauthorized information disclosure and validates controls regularly. Utilizes eMASS system to upload/modify artifacts and tracks workflow progress daily. Routinely briefs stakeholders with progress reports and conveys recommended course of actions.• Highly proficient in creating POA&M’s and assimilating artifacts. • Mitigated 53 network and host based high and very high vulnerability tasks.• Tests AP’s/controls on a predefined basis leveraging artifacts and DoD policy to ensure control satisfies the desired state. • Develops BCP and Continuous Monitoring Policies IAW DoD regulations.• Configures/troubleshoots on Cisco and Juniper device configuration to help achieve optimal network performance.

Protects organizations against malicious actors through threat hunting, dark web monitoring, and threat modeling, with expertise in developing and implementing threat intelligence strategies leveraging MITRE ATT&CK. Committed to staying up-to-date on the latest trends and techniques in the field of cybersecurity. Strong communicator and collaborator with a deep understanding of the threat landscape and the tools and techniques used by cybercriminals.• Utilizes Shodan and Crowdstrike for threat intel oversight. • Performs static and dynamic analysis of malware in sandbox environment.• Developed a VM environment to further information research mission capability.• Experienced in analyzing EDR alerts and conducting root cause investigations for security events.• Proficient in Darkweb monitoring to proactively identify and mitigate potential threats.• Conducts routine vulnerability assessments and updates clients and C-suite staff on recommend actions.

• Plays key role in on-going network design, reevaluation and optimization to keep pace with the organization's growth.• Maintains regular assessments and evaluation documents for 7 ICS systems, informing ISO of any discovered faults or discrepancies in operations.• Led and assisted technical upgrade projects for clients by working and coordinating with consultants and developers for integrations.

Bachelors, Cybersecurity Information Assurance

Education record