Currently leading the Incident Response team at Southwest Airlines!- Act as a people leader for seven direct reports, formally managing the Incident Response function.- Develop metrics dashboards and seek ways to improve key metrics such as MTTR and MTTA while providing visibility and context to senior management.- Advise on new security software and vendor procurement, including participating in Request for Proposal (RFP) processes.- Manage and maintain the budget for the Incident Response team as well as seeking opportunities to keep costs low and improve process efficiency.- Develop, review, test, and maintain the Incident Response plan and participate in regular tabletop exercises to validate the plan.- Oversee new deployments of alerting and content engineering by collaborating with both internal and external teams.

- Lead the day-to-day operations of the Incident Response team at Southwest airlines, including leading and organizing an on-call SOC rotation, handling high-priority security incidents, and communicating to key stakeholders in stressful situations.- Act as a primary incident handler/commander, driving the response across the technology organization and performing necessary handoffs, regulatory notifications, and escalations.- Provide and communicate key metrics regarding incidents, including sending regular updates to the enterprise as a whole across various verticals.- Perform analysis using tools such as a SIEM, EDR, log analysis, and cyberforensic suites. This includes investigating endpoints at a wide variety of locations and configurations, such as airports, remote users, and corporate systems.- Perform after-action reviews to discover lessons learned and implement additional measures to strengthen response in the future, such as updating runbooks, providing additional information and IOCs to Threat Intelligence teams, tuning alerts, etc.

- Operate as an Enablement engineer, providing cybersecurity analysis and implementation to the entire business.- Investigate, resolve, and collaborate on high-priority incidents throughout the entire lifecycle for new implementations.- Significant experience working with access management systems as well as Single Sign On capabilities (OAuth, OIDC, SAML).- Design secure login policies and investigate issues/incidents within our SSO and IAM suites.- Explain and guide internal customers who may otherwise not be familiar with the Cybersecurity space with their implementations.- Handle escalations with Cybersecurity technologies and incidents as they are requested.- Administration and analysis of AWS logs and security rules.

- Participated in a Cybersecurity Operations role with experience working an on-call schedule and high priority incidents.- Experience working with web filtering, web traffic analysis, server monitoring, SSH key management, web proxy management, and other essential infrastructure. - Wrote and mainted documentation for both Network Endpoint Security technologies as well as IAM technologies.- Worked both simple and complex incidents and requests from a ticketing system to support the entire business.

Assisting with instruction of Introduction to Computer Technology and Applications, including Microsoft Office skills and basic computer literacy. Hold weekly office hours to assist students. Grade and evaluate assignments.

Assist with acquisition, analysis, and processing of digital evidence including cell phones, hard drives, and other digital devices. Utilize tools such as Cellebrite UFED Physical Analyzer, Magnet Internet Evidence Finder (IEF), and AccessData Forensic Toolkit (FTK) to discover and record evidence.Observe police operations and learn forensic processes used in law enforcement.Assisted in creating reports to submit to the judicial system, as well as in researching advancements to digital forensic tools to benefit law enforcement.

- Handled scheduling workshops via Microsoft Outlook and Microsoft SharePoint.- Scheduled computer labs for our workgroup.- Assisted with hiring process for new staff, including hosting phone interviews and reviewing candidate profiles.- Held and coordinated weekly staff meetings.- Reported status updates to supervisors.

All responsibilities listed in Student Software Trainer below plus:- Assist in hiring process of new staff.- Set an example for new hires, and assist with training and onboarding.- Help develop new and innovative training programs and training guides.

- Train students and faculty members on professional software packages, including Adobe Photoshop, Adobe Illustrator, Adobe Dreamweaver, iMovie, GarageBand, and Windows Live Movie Maker.- Develop new training documentation, including both step-by-step and quick reference guides for use internally and by workshop attendees.- Perform training in both workshop (20+ people) and one-on-one environments.

- Developed new Microsoft Project training materials for Project Managers. - Assisted with tracking statuses of various projects in Clarity.- Attended weekly mentoring meetings.

- Lead a group of new students through their day of registration on campus.- Answered questions and provided logistical assistance for parents and students.