Jeff Persinger Email & Phone Number

Kuwait

- Incident Handling and Response and Threat Analyst working in U.S. Army Regional Control Center, Southwest Asia (USARCC-SWA) in Defensive Cyber Operations Directorate (DCOD) section- Manage cyber defense ops for 12K+ network devices with 16K+ member subscribership- Focused use of CJCSI 6510.01F and 6510.01B | trained 11 team members in daily CND operations- Initiate computer incident handling procedures | investigate potential network compromises- Process and organize full lifecycle of JFHQ-DODIN TOs, OPORDS, CTOs, NSA PULSE notifications, DISA Tippers, SharkSeer and products from other threat reporting mechanisms- Utilize digital forensic tools: Microsoft Defender Endpoint (MDE), Security Onion, Army Endpoint Security System (AESS)/ePO, TYCHON, Gabriel Nimbus, Arcsight SIEM, ESM- Collaborate with threat intelligence analysts; provide indications and warning and contributes to predictive analysis of malicious activity; initiate triage to control/limit damage from Incidents- Enforce Network Security Violation and other policies | analyze data for trends and threats- Prepare organization for inspections; “Excellent” rating during annual (2021) CSSP inspection- Perform Threat Hunt(ing); search for malicious activity across networks and digital assets- Develop, document, and review Tactics, Techniques, and Procedures (TTP) and instructions- Prepare formal, comprehensive reports and presentations for technical and executive audiences- Gather evidence: establish chain of custody for use in UCMJ/criminal investigations

Kuwait City Metropolitan Area

- Worked within the USARCENT G6 Cs branch as a Subject Matter Expert (SME); ensured adherence to all security requirements within the Computer Network Defense (CND) section- Developed/maintained USARCENT Cs processes to guide military leaders | Governance and Policy; designed, documented, and tracked certification efforts - requirements and decisions- Utilized Remedy/ITSM to create, track and manage customer requests; developed archives- Audited standard, elevated, and Foreign National accounts to ensure standards are maintained across Southwest Asia (SWA): organized/archived results - ensured operational security standard- Executed monthly physical site security inspections for issuance of ATOs | generated/maintained RMF artifacts, collaborated via eMASS for NIPR/SIPR extensions for new and existing network customers- Established standards for governing Cs requirements and capabilities for multiple domains- Authored/Reviewed USARCENT Policy and guidance affecting SWA Area of Responsibility - Processed, organized, tracked and reported on CENTCOM requirements for leaders’ visibility- Assisted in Policy development, standards, processes and regulations for military leadership- SME in SWA military environment; prepared metrics/aids - briefed military leaders- Attained eMASS training/account for collaboration of CS projects with Authorizing Official- Organized USARCENT’s 2018/19/20 Best Cyber Warrior competitions: 450 participants/yr

Oklahoma County, Oklahoma, United States

- Utilized RMF process from “ground floor” for new B-1 Cybersecurity Program at Tinker AFB- Acquired one-year Approval to Operate (ATO) for B-1 bomber and Platform IT (PIT) systems- Coordinate w/Chief Engineer; authored policy/guidance for B-1 Cybersecurity Program; utilized eMASS for RMF collaboration | focused use of CNSSI 1253, NIST 800-53 and 800-59- Gather artifacts, develop SW/HW inventories, and develop Project timelines for SCAP/scan- Draft Architecture Analysis Report (AAR); create dataflow diagrams of B-1 Line Replacement Units (LRU) for use in B-1 System Security Plan (SSP) and Risk Analysis Report (RAR)- Authoring cybersecurity portion of the B-1 Information Security Plan (ISP) and Program Protection Plan (PPP); authoring B-1 Cybersecurity Strategy (CSS) and Continuous Monitoring- Drafted Cybersecurity Impact Evaluation Recommendations (CIERs) for testing of new weapon and testing other modifications within the B-1 platform: ATO approved “on-time”- Assisted in preparations for Cybersecurity Tabletop exercise; tested highlighted vulnerabilities

Camp Buehring, Kuwait

- Senior CS Analyst: Utilize ACAS, Q-Tip, Log Collector, HBSS client, SCCM client and ITSM- Reported on and maintained IAVA compliance for 2.3K workstations | 6.5K network customers- Executed monthly QTip scans, remediate and report results: Cross-trained 12 personnel for CS- Applied RMF/Security Management methodologies on both classified/unclassified networks; uploaded monthly CS artifacts via eMASS for collaboration of annual network certifications- Maintained understanding of military publications/regulations: AR 25-1 and 2, and 380-5- Performed manual/automated IAVA patching; repair defunct HBSS and SCCM client software- CND expert: utilized ITSM for trouble ticket management to resolve CDVs, NDCIs and PSPs- Investigated security breaches; utilized HBSS, event/security logs: mitigated vulnerabilities- Responded to and managed Cross Domain Violations involving classified material/DCI events- Developed CS program for site: initiated and completing continuity program and instructions- Accepted role as Alternate Site Lead: personnel and program management for Camp Buehring- Strong emphasis on getting soldiers “back on mission”; prioritized IMO education/guidance- Prepared briefings, provide vulnerability assessment and visibility to military/civilian leaders- Assisted in development of new processes: PKI Exemption to Policy and S6 education- Initiated/reviewed local Firewall mod requests; SME on exemptions and Change Management- Supplied military leadership chain with policy coordination, information and network security- Assisted Service Desk & customers with troubleshooting of workstation issues as relating to SCCM, HBSS, patching, security software (AppLocker, BitLocker), and network connectivity- Maintained/managed ATCTS database; user Compliance Reporting for 45 contracted personnel

Fob Spin Boldak, Afghanistan

- Sole CS Analyst; Spin Boldak for 2 year period, and part of Kandahar CS Team for 12 months- Used DISA STIGS/VMS and SCAP Compliance Checker during vulnerability assessments for purpose of annual RMF requirements | ensured both military networks approved via DIACAP- Executed monthly metrics gathering and security controls inspections as well as physical site security inspections for purpose of RMF compliance checks | maintained existing ATOs | established new ATOs- Maintained great understanding of AR 25-1&2, and 380-5 as well as other military publications- Transitioned site - tactical to strategic network: executed multiple initial/annual DIACAPs- Investigated security breaches; utilized HBSS, event/security logs: mitigated vulnerabilities- Maintained and reported IAVA compliance for 3K workstations / 75 servers / 6.5K customers- Responded to and managed Cross Domain Violations involving classified material/DCI events- Sole CS support -remote locale: 550 personnel customer base with services/guidance/training- Developed CS program for remote site: initiated and completed continuity programs and SOPs- Responsible for EMSEC, IAVA mitigation, maintained ATCTS database for 35 personnel- Prepared briefings, provided vulnerability assessment and visibility to military/civilian leaders- Applied Risk/Security Management methods on both classified/unclassified DoD networks- Supplied military leadership chain with policy coordination, information and network security- Trained 15 personnel to perform recurring scans using eEye-Retina, ACAS, Q-Tip, LanGuard- Mentored and trained at least 10 personnel seeking interest in CISSP certification / sponsored 4

Kandahar, Afghanistan

-Supported the 160th Signal BDE/25th Signal BN, 10th Mountain Division and 82nd Airborne Division + ISAF/NATO forces as part of the Southern Regional Command’s (Afghanistan) Strategic Information Assurance team, the largest Information Assurance (IA) group in theater-Applied fundamental Risk and Security Management methodologies; ensured compliance standards on both classified and unclassified networks- Used DISA STIGS/VMS and SCAP Compliance Checker during vulnerability assessments for purpose of annual RMF requirements | ensured both military networks approved via DIACAP- Executed monthly metrics gathering and security controls inspections as well as physical site security inspections for purpose of RMF compliance checks | maintained existing ATOs | established new ATOs- Maintained great understanding of AR 25-1&2, and 380-5 as well as other military publications- Transitioned site - tactical to strategic network: executed multiple initial/annual DIACAPs-Supplied military leadership personnel with policy coordination, information and network security-Authored site Disclosure of Classified Information (DCI) Standard Operating Procedure (SOP)-Trained incoming personnel to perform recurring scans using eEye Retina, Q-Tip and Languard-Responsible for I3A/TEMPEST, DIACAP (ATO/ATC), IAVA patching using GFI LanGuard-Responded to and managed cross domain violations of classified material and DCI events-Supported a customer base of over 1,800 personnel with IA services and guidance

Incirlik Air Base, Turkey

- Managed Cybersecurity, Service Desk, Ground Radio, ADPE, and Comm Focal Point sections- Plans and Programs team member during contracting of new Communications Squadron building: $8M project complete with design of Protective Distribution System (PDS)- Led 13 personnel overseeing ongoing communications projects on Incirlik Air Base and its 4 geographically separated units: provided managerial oversight of $9M communications network- Managed IAVA patching/compliance mission for both military ntwks: met annual RMF rqmts- Provided technical support to over 1.6K personnel for both classified and unclassified networks- Directly reported/briefed status of countrywide communications to military leaders- Planned and executed full replacement of all 1.4K base workstations with full OS upgrade- Primary coordinator change agent: assisted authoring update of Air Force Instruction ensuring desktop equipment accountability and management throughout United States Air Forces Europe- Utilized Remedy; trouble ticket remediation: troubleshot HW/SW issues for 3K customer base- Headed tech refresh of 900 workstations for base: imaged systems and rolled-out “on time”- Developed metrics system: detailed community/customer impacts of Service Desk operations

- Led and supervised 16 personnel responsible for all aspects, including maintenance of deployable communication assets of a $2M C2 system; both unclassified/classified networks- Managed Network Administration, Systems Administration, Cybersecurity and Ground Radio shops: provided guidance and direction for exercises & technical training- Developed Communications Focal Point position within Squadron: Created centralized position for military leaders for all comm-related issues and tasks: Managed daily reporting/oversight- Authored/presented briefs to military leaders on status of outages, maintenance, and projects- Project manager for numerous field exercises: set up/tear down: provided network and services- Coordinated 120+ Authorized Service Interruptions affecting base-wide communications- Managed training of over 30 personnel during tenure as Communications Focal Point/NCOIC- Deployed twice to Iraq for total of 8 months: Managed weapons and vehicle programs as well as assisted in development of Cybersecurity section to manage 3.4K workstations: IAVA/B- Assisted with renewal of annual DIACAP rqmts for both classified and unclassified systems - Utilized Remedy ticketing during deployments: published metrics: oversaw 24K fix actions- Utilized Active Directory; built accounts: troubleshot HW/SW issues: 8K+ customer base

Izmir, Turkey

- Worked with contractor personnel on design and inspection of Protective Distribution System installation at the Sirinyer NATO garrison during installation of classified network- Assisted with relocation planning of work spaces for 100+ personnel into alternate/temporary work locations: Utilized AFI 33-200 and AFMAN 33-221: ensured compliance with migration- Supervised and led 8 personnel operating within the Cybersecurity and Service Desk offices- Managed $2M equipment inventory across three locations: Oversaw Defense Reutilization program, updated database for over 9,000 equipment pieces: created viable program- Oversaw application of IAVA's between both class/unclass networks: 300 computers/35 servers- Utilized Remedy; installed printers, troubleshoot connectivity issues and HW/SW