Jason E. Email & Phone Number

Washington, Dc, Us

Washington, Dc, Us

Gainesville, Virginia, Us

Provide offensive security/data exploitation support.Assist with attribution efforts related to cyber activity.Utilize Python, Power Shell and Bash scripting to parse big data for targeting.Use a variety of tools and methods to extract information of foreign intelligence, counterintelligence and targeting value from digital data.Create a range of products that inform operations, drive targeting and collection, contribute to intelligence products, and support multiple customer needs.Work with a team to analyze existing software applications and tools, and recommend new technologies and methodologies to improve team performance.Write and update technical documentation such as user manuals, system documentation, training materials, processes and procedures.Collaborate cross-functionally with data scientists, engineers, developers, targeters, and analysts.

Founder and CEO of Eaton Enterprise.

Montreal, Quebec, Ca

Lead a team of 10 Application Security Engineers who support web application security assessments such as DAST, SAST, API testing and development of new capabilities.Proposed an automation SecDevOps methodology that utilized Burp Enterprise, Fortify and Python scripts with CI/CD pipelines through Gitlab. This reduced the workload of the appsec engineers significantly and allowed them to take a closed look for manual testing if the automation flags a potential vulnerability.

Montreal, Quebec, Ca

Lead Red Team Adversary Simulation/Emulation in client environmentsAdministratively lead a team of 10 Application Security Engineers who support web application security assessments such as DAST, SAST, API testing and development of new capabilities.Lead and participated in aspects of Cyber Development and Operational Consultancy: Malware Assessment, Red Teaming, Penetration Testing, and Hunt Methods.Perform network, wireless, web application, and API penetration testing.Collaborate with a team of Cyber Professionals in support of a unified Mission to uncover technical threats and protect critical networksConducted Phishing, Red Team Adversary Simulations/Emulation.Developed exploits/payloads to be used in red team operations.Participate in physical red team engagements.Authored technical documentation to include, policy, capability briefs, Standard Operating Procedures (SOP’s), Red Team Methodologies, Scoping and Rules of Engagement (ROE) documentation.Wrote/modified custom scripts to aid in automating red team infrastructure.Created a development program for red team operators to assist career growth.

Reston, Va, Us

Developed the Red Team Methodology, penetration testing rules of engagements, test plans, standard operating procedures and reports.Developed the Red Team Technical Project Management framework/documentation.Researched and remained up-to-date with new threats and adversary emulation methodologies.Expertise in testing web applications for common web application security vulnerabilities including input validation vulnerabilities, broken access controls, session management vulnerabilities, cross-site scripting issues, SQL injection and web server configuration issues.Hands-on expertise with commercial and open-source cyber security tools such as proxies, port scanners, vulnerability scanners, exploit frameworks (ex: Burp Suite, Nmap, Metasploit, Cobalt Strike, Nexpose/IVM).Developed comprehensive and accurate reports and presentations for both technical and executive audiences.Extensive knowledge of MITRE ATT&CK Framework, OWASP, IDART, PTES, Red Team Field Manual, OSSTMMPenetration testing experience with web applications, operating systems, network protocols, wireless, mobile, databases and middleware.Process OSINT in accordance with the “intelligence cycle”: direction, collection, processing, analysis, dissemination, and feedback from open source toolsDeveloped, and recommended information risk management policies and standards, including controls, processes, and procedures to ensure that information is protected and available to the business in a timely fashion.Support physical security Red Team engagements.Evaluate system vulnerabilities for Windows, Linux, Unix operating systems, network topologies & infrastructure devices, databases, operational technology and ensure risk remediationWork effectively with others in the Information & Technology organization, operations in support of security policies and standards.

Reston, Va, Us

Conduct network, and web application penetration tests in Amazon Web Services (AWS) environments. Manage a small team of junior penetration testers and lead penetration testing engagements. Examine assets to determine if vulnerabilities exist and if vulnerabilities are found proposes remediation strategies that can be applied to mitigate them.Lead Security Engineer for the Cyber Assessment Team doing full vulnerability assessments for goverment clients.Utilized the blackbox/greybox penetration testing methodology for engagements. Created a Standard Operating Procedure (SOP’) and other polices for a standard penetration testing methodology for Directors, Cyber Leaders and General Council. Review PO&AM’s and provide mitigations for found vulnerabilities for pentest results.Provide guidance in implementing the Risk Management Framework (RMF) Continuous Monitoring with various security tools, policies and procedures.

Reston, Va, Us

• Team Lead for Cyber Assessments of GOTS and COTS mission partner applications.• Conduct Vulnerability Scanning/Assessments of Web Applications, Windows, Linux, and various databases (Oracle, MSSQL Server, MySQL).• Conduct white-box penetration testing on AWS services and web applications and hardened OS’s baselines via Kali Linux.• Proficient in Nessus, WebInpsect, AppDetectivePro, OWASP ZAP, Kali, etc.• Script writing experience via Python, Perl. • Conduct dynamic/static code analysis of COTS and custom mission web applications.• Manage the continuous Monitoring program via Security Center and WebInspect Enterprise.• Advising and assisting with the full Sponsor life-cycle Assessment and Accreditation (A&A) process.• Examining the Sponsor information systems to identify risk/vulnerabilities and recommend mitigating strategies.• Ensuring the integrity of Sponsor systems by identifying and mitigating potential avenues of exploitation, including system level attacks and user level attacks.• Analyzing security plans to develop an understanding of systems and applications including making recommendations on program-level documentation (e.g., requirements specification, system architecture, design documents, test plans, security plans, etc.)

Springfield, Va, Us

Government Point of Contact (GPOC) for NGA’s ArcSight Enterprise Audit.Team Lead Enterprise Audit for NGA.System Administrator for approval/denial of new ArcSight accounts/credentials.Manage Big Data Systems Logs collection on unclassified/classified networks. Manage 20+ ArcSight Engineers with logical instructions to configure and maintain Computer Network Defense (CND) system operations.Utilize ArcSight to collect and analyze event/security logs on Windows, Linux, UNIX and Solaris workstations and servers.Investigate and report suspicious logs to Counter Intelligence/Insider Threat Authorities. Provide technical oversight for Removable Media (RM) and Data Loss Prevention (DLP) security controls, and ensure proper configuration. Oversee the documentation, validation, and accreditation, and authorization processes necessary to assure that new information technology systems meet the NGA IA and security requirements.Performed Vulnerability testing of networks, servers, DMZ, hosts, firewalls, IDS/IPS and Web Applications. Developed system security requirements for virtual and cloud computing technologies and concepts.Ensure appropriate treatment of risk, compliance, and assurance from mission, security, and cost perspectives.Manage the strategic, personnel, infrastructure, policy enforcement, and emergency planning implications of information security for the organization.

Springfield, Va, Us

Coordinate, analyze and disseminate all IT and Intelligence related policy to Senior Executive Staff (SES), as well as the Chief Information Officer (CIO) of NGA. Write technical policies/manuals for IT Risk Management Framework, Cyber Security, Cloud Based software/programing, Enterprise Architecture, GEOINT and HUMINT collection systems.Research, draft, and coordinate new or revised policies and instructions to meet organizational needs.Perform document reviews, and research existing internal and external policies and instructions.Prepare draft polices; conduct working groups/sessions to collect feedback.

Springfield, Va, Us

Serve as an Advanced Control Tactics Instructor.Responsible for teaching over 120 federal agents/officers arrest techniques, control tactics, weapons manipulation/retention, and officer survival. Assist/Coordinate training with the Special Operations Division.

Springfield, Va, Us

Provide force protection security, enforcing federal laws and ensuring DoD rules and regulations are followed. Monitor access control; screening employees and visitors for weapons and explosives using metal detectors and high-tech equipment such as x-ray machines, walk through magnetometers, and handheld magnetometers; Monitor safety standards and report hazards; respond to alarms; provide emergency response Maintain regular patrols and calls for service. Maintain traffic flow on federal facility grounds. Use logic, analysis, creativity, judgment and tact to clarify and resolve complex and sensitive issues regarding personal security and police matters. Conduct interviews to establish evidential (or something similar) facts required resolve to situations.Initiated 30% more investigations than other officers, and drafted accurate, detailed police reports.