• Oversee incident response, vulnerability management, email security, SIEM, and EDR operations.• Lead a hybrid team through day-to-day delegation and prioritization of tasks and projects.• Worked on projects to deploy Exabeam, migrate Rapid7 to a cloud-based solution, deploy Crowdstrike to missing areas of the business, revamp a poorly functioning incident response program, establish a PCI compliance remediation program, start a Cloud Center of Excellence, and more.• Acted as a consultant and performed reviews of configurations being deployed to a cloud environment.• Worked on project to form and define and Incident Response Program where one did not formally exist.• Act as a Mentor and Leader to other analysts through training sessions and guidance through projects and day-to-day work.• Collaborate with Infrastructure and Network teams on building and deploying hardware components with a risk-focused mindset.• Collaborate with teams across the company in managing risk and creating new policies and standards.• Work in partnership with the Governance, Risk, and Compliance team on PCI and SOX requirements.• Collaborate with stakeholders and system owners on meeting PCI and SOX requirements.• Monitor and assist with the acquisition of new properties with a risk-focused mindset.• Monitor and assist with the launch of new products with a risk-focused mindset.• Create documentation and training programs for other analysts.• Tuning and maintaining of EDR, SIEM, and vulnerability management platforms.• Monitoring and maintaining security toolset in Azure.• Identify gaps in detection and developing rules using toolsets to cover those gaps.• Performed review and integration management of multiple resort acquisitions.

• Moved to OpenText through Webroot acquisition.• Led project to form and define an Incident Response Program and Team.• Acted as Team Lead and Manager for a Security Incident Response Team of 20+ members.• Drove Incident Response process creation and updates.• Worked with internal and external stakeholders to drive a Security focused mindset.• Developed junior and senior analysts into competent incident responders and leaders.• Wrote and maintained process and procedure documents for Security Incident Response Team including incident handling playbooks.• Acted as Incident Commander in multiple high-profile incidents, collaborating with internal and external stakeholders.• Reviewed After Action Reports and created action items for other teams.• Measured and reported performance of incident handlers using metrics I have created.• Also served as a part of the Threat and Vulnerability Management Engineering Team.• Act as SME and main contact point for deployment of Qualys to new mergers and acquisitions.• Setup new scans, asset groups, and other tasks within Qualys.• Deploy and manage scanning appliances across corporate and commercial environments.• Troubleshoot issues caused by Qualys scans or across Qualys appliances.• Act as escalation point for any issues brought to the TVM team.• Led project to create documentation and training for team.

• Administrate and act as system owner for various cybersecurity tools including Cybereason, Crowdstrike, Proofpoint, Mimecast, Splunk, Swimlane and Bitdefender.• Perform project management for SecOps projects by working with stakeholders and creating dashboards to track project progress and status.• Act as backup system owner for Palo Alto firewalls, ProtectWise, AttackIQ, and Tenable.• Run projects for deployment of agents to all employees and upgrades of security infrastructure.• Plan and conduct meetings for review of internal security posture.• Work with other teams to complete projects.• Educate other teams and employees on proper security protocols and best practices.• Perform security penetration and vulnerability testing against high-risk applications.• Assist in information classification and data security.• Train and mentor interns and new security analysts.• Perform physical penetration testing of facilities and manage physical security systems such as badge and cameras.• Perform Computer Security Incident Response activities for an enterprise environment with a global presence.• Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation.• Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information.• Evaluate firewall change requests and assess organizational risk.• Assist with implementation of countermeasures and mitigating controls.• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance.

• Managed SOC Analyst schedules, delegation of tasks and projects, and daily priorities.• Act as a mentor to other analysts through training and coaching.• Ran a project where I wrote custom scans for compliance using Security Center.• Performed project management for team and compliance projects by creating dashboards to track project status and progress and engaging stakeholders.• Managed a project to enable AlienVault to meet government regulatory needs and enable it to support close to 30,000 endpoints.• Managed the Information Security side of a project to deploy 30,000+ servers to support 2020 US Census.• Work with system owners to ensure that systems meet FEDRAMP (NIST 800-53) and PCI-DSS requirements.• Work with the Information Assurance team to assure regulatory compliance controls are in place and maintained.• Perform security penetration and vulnerability testing against high-risk applications and information classification.• Perform Computer Security Incident Response activities for a large organization, coordinates with other government agencies to record and report incidents.• Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information.• Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems.• Assist with implementation of countermeasures or mitigating controls.• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance.• Assist government programs in managing and maintaining DISA, NIST, and FedRAMP compliance.• Work on project to stand up and maintain a set of VMs for use as a malware detonation sandbox as well as a training tool for other agents to practice ethical hacking techniques.

• Review tickets and respond to clients through ticketing system• Investigate and troubleshoot any client issues• Work on a 3-man team with over 30 clients ranging from healthcare to engineering• Schedule own appointments to go out to client sites and manage own time• Audit licenses and recommend ways to rectify licensing issues• Install and setup workstations, printers, and other equipment according to client needs• Setup and maintain VMWare structures• Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.• Administer servers, desktop computers, printers, routers, switches, firewalls, phones, personal digital assistants, smartphones, software deployment, security updates and patches.• Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.• Perform regular security monitoring to identify any possible intrusions• Contribute to and maintain system standards.• Research and recommend innovative, and, where possible, automated, approaches for system administration tasks.• Perform periodic performance reporting to support capacity planning.• Install and support LANs, WANs, network segments, Internet, and intranet systems.• Install and maintain network hardware and software.• Assign routing protocols and routing table configuration.• Maintain network servers such as file servers, VPN gateways, intrusion detection systems.

• Identify network security flaws and vulnerabilities and create strategies to mitigate them.• Create, implement, and administer network security software and hardware from VPNs to firewalls.• Create and maintain a list of taken and available IP addresses in a network asset list.• Monitor, analyze, and respond to numerous suspicious security events, including IPS, Firewall, IDS, and VPN.• Maintain a record of all network users and their assigned privileges to ensure that only authorized people can access sensitive data.• Work in connection with the Security Operations team on maintaining safe configuration of servers and network equipment.

• Build computers to customer’s specifications along with my input• Assist with remotely removing viruses and malware• Remotely install programs and setup new users for the business• Create and maintain firewall rules to ensure network security• Design websites and graphics to customer’s specifications• Provide advice on future technology to implement within business• Assist with establishing teams to take over IT for the business through training• Document software used within the business and create job aids for business owners• Assist Twitch streamers with stream setups and technical issues during stream• Design stream and profile layouts along with logos and other requested graphics

• Diagnose and troubleshoot computer issues relating to reaching the Navy Federal website or using its functions• Work within an ITIL workspace, promoting positive change and growth through IT service management• Provide tech support to branch operations or escalate to remote desktop support teams• Technical support within Active Directory, MS Office, Avaya and basic Outlook• Operated within 12 hour SLA guidelines to resolve tickets quickly• Basic Windows and MAC troubleshooting• Setup new Exchange accounts, basic Outlook support for end users• Utilized LogMeIn to remotely support end users• Guide members through how to use website or on basic computer use and upkeep• Assist and coach other employees• Perform hands-on repairs for end users within my building• Take on projects relating to our department such as creating job aids and training materials, testing new Navy Federal systems, documenting existing software, or managing Active Directory profiles

• Served as both a Consultation and Operations Agent, working as both a front end agent and working on logistics and repairs • Handled logistics of the precinct including interacting with vendors, shipping off units, and ordering supplies• Suggested and sold Geek Squad services• Assisted Advanced Repair Agents with performing repairs and installs• Diagnosed and provided basic troubleshooting for a variety of devices• Provided education on the proper use of a variety of software programs• Mentored and coached peers and new agents

• Coached and trained employees• Ran project to completely redesign kitchen and increase efficiency• Ensured accuracy of drawers and time sheets• Assisted employees with responsibilities both in kitchen and front counter• Resolved conflicts between employees as well as customer complaints• Ordered and maintained stock• Processed interviews and hired new employees• Processed and reviewed terminations