Christian Lowe Email & Phone Number

Washington, DC, US

Atlanta, Georgia, United States

• Deployed and maintained Timesketch, open source collaborativeforensic analysis tool, for incident response allowing for easierhand-offs and greater investigation efficiency in a globally distributedremote incident.
• Designed and developed an end-to-end forensic pipeline for incidentresponse engagements, allowing analysts to retrieve, parse, andanalyze datasets on the order of 100's of millions of records. Thissaved the.
• Developed a python library to extend Django REST Frameworkcapabilities allowing our team to move to an event driven architectureand perform security and customer management automations on anyAPI event in our environment.
• Created and implemented a Django REST Framework permission class,allowing us to expose internal APIs to external teams whilst providingthe business control over which users and groups have access tomodify critical.
• Collaborated with several customer facing teams to develop acustomer management system, resulting in unifying customermanagement across three different managed services.
• Migrated a legacy python library to a new one by creating unit andintegration tests, allowing us to transition to a new service without anydowntime.

• Sole technical contributor supporting the decision to acquire theforensics-at-scale tool, Velociraptor, by prototyping the integration intothe Rapid7 Insight agent, building the foundation for the remoteincident.
• Developed automation to improve incident management, tracking andcommunication between analysts, customer advisors, externalcustomers and the business through integration with various externalservices such as Slack.
• Automated the monthly delivery of key customer status and securityreports for managed services, saving analysts over 500 hours ofmanual report writing each month to deliver the reports to customersand improving the.

• Increased transparency between analysts and the customers byintegrating an internal commenting system with an external customerfacing product.
• Decreased alert fatigue by developing a system to regularly collect andparse hundreds of thousands of low fidelity alerts and sending morethan 75,000 daily email notifications to customer point of contact(s)across all.
• Refactored an alert automation framework from local analyst machinesand configs to APIs and cloud services improving reliability oncollecting critical contextual information for investigative analysis.

• Automated phishing reports by querying logs and pivoting on IOCsincluding malicious IPs, websites, and processes reducing errors andduplicated efforts for a specific type of alert.
• Assisted in multiple major incident response engagements.
• Created an installable python library using Artifactory and semanticversioning eliminating the need to copy code.