Christian Lowe Email & Phone Number

Washington, Dc, Us

Atlanta, Georgia, United States

● Deployed and maintained Timesketch, open source collaborativeforensic analysis tool, for incident response allowing for easierhand-offs and greater investigation efficiency in a globally distributedremote incident response service.● Designed and developed an end-to-end forensic pipeline for incidentresponse engagements, allowing analysts to retrieve, parse, andanalyze datasets on the order of 100's of millions of records. Thissaved the organization thousands of hours of manual incident responsework.● Developed a python library to extend Django REST Frameworkcapabilities allowing our team to move to an event driven architectureand perform security and customer management automations on anyAPI event in our environment.● Created and implemented a Django REST Framework permission class,allowing us to expose internal APIs to external teams whilst providingthe business control over which users and groups have access tomodify critical operational information.● Collaborated with several customer facing teams to develop acustomer management system, resulting in unifying customermanagement across three different managed services.● Migrated a legacy python library to a new one by creating unit andintegration tests, allowing us to transition to a new service without anydowntime.● Developed a collaborative data science platform in the cloud using JupyterHub and AWS.

● Sole technical contributor supporting the decision to acquire theforensics-at-scale tool, Velociraptor, by prototyping the integration intothe Rapid7 Insight agent, building the foundation for the remoteincident response service. Ultimately leading to the acquisition andmarketability of Velociraptor as a line-item SKU of the Rapid7 softwarestack.● Developed automation to improve incident management, tracking andcommunication between analysts, customer advisors, externalcustomers and the business through integration with various externalservices such as Slack, Salesforce and Jira.● Automated the monthly delivery of key customer status and securityreports for managed services, saving analysts over 500 hours ofmanual report writing each month to deliver the reports to customersand improving the customer experience with increased consistency ofdelivery times.

● Increased transparency between analysts and the customers byintegrating an internal commenting system with an external customerfacing product.● Decreased alert fatigue by developing a system to regularly collect andparse hundreds of thousands of low fidelity alerts and sending morethan 75,000 daily email notifications to customer point of contact(s)across all MDR customers.● Refactored an alert automation framework from local analyst machinesand configs to APIs and cloud services improving reliability oncollecting critical contextual information for investigative analysis.

● Automated phishing reports by querying logs and pivoting on IOCsincluding malicious IPs, websites, and processes reducing errors andduplicated efforts for a specific type of alert.● Assisted in multiple major incident response engagements.● Created an installable python library using Artifactory and semanticversioning eliminating the need to copy code.