Jeff Powers Email & Phone Number

• Utilized a DoD-approved enterprise SIEM tool to monitor, detect, and respond to threats on all USACE-supported networks and enclaves. This included implementation, configuration, monitoring and maintaining the SIEM tool (ArcSight and Elastic)• Provided real-time analysis of security alerts generated by applications and network sensors, hardware, cyber tools, Government-approved threat intelligence feeds and threat detectors• Performed data correlation and analysis reporting for all sensors and defense capabilities at an enterprise level• Maintained documentation for all feeds, sensors, and connectors in the SIEM and providing reports to USACE OCIO/G-6

Fort Gordon, Ga

Attack, Sensing and Warning• Utilize ArcSight ESM, Tanium, and Big Data Platform (BDP) technologies to hunt for network intrusions, malware, and software/hardware vulnerabilities.• Recommend mitigation and remediation of events to ensure network integrity. • Create Army internal reports detailing analysis of various network events and intrusions.• Coordinate efforts to prevent or mitigate threats to Army networks and ensure contribution and compliance with United States Cyber Command (USCC) and Service Component efforts to do the same across Department of Defense networks.• Track malicious threat actor(s) actions and attempts to compromise Army networks, analyze the events, and document the TTP,• Review intelligence products from internal/external sources in accordance with Attack, Sensing, And Warning (AS&W) operating procedures.• Ensures AS&W information is analyzed and distributed based upon established cybersecurity operations guidance to ensure coordination of AS&W activities throughout the Army in support of USCC strategies.• Coordinate with appropriate agencies, and subordinate organizations to ensure that accurate information is documented and implemented as policy, guidance, or standard operating procedure for AS&W activities in support of the mission and operational requirements of ARCYBER.• Research emerging threats, Common Vulnerabilities and Exposures (CVE), and newly released zero-day threats to verify Army network security posture and recommend mitigation actions in order to ensure the continued successful operations of the United States Army Network Enterprise.

Ft. Belvoir, Va

Incident Management/Incident Handler• Operates at Army Cyber Command (ARCYBER) G33 Current Operations (CUOPS) Defensive Cyber Operations (DCO) in the Incident Management section of Network Defense• Manages cybersecurity incident handling activities and analyzes threats and suspicious/malicious network traffic through cyber threat awareness as a result of suspected network incident reporting until the investigation is completed• Governs distribution of incident handling procedures or interim guidance to mitigate or remediate cyber threats to subscribers and subordinate organizations• Distributes directed actions to appropriate subscribers and subordinate organizations throughout the Army in support of USCYBERCOM and DoD strategies• Perform Incident Management by triaging possible issues on the Department of Defense (DoD) network• Utilizes DCO tools (Tanium, Gabriel Nimbus, Acropolis Suite, ARL Interrogator, Internal/External TIPPERS, Remedy, Army Cyber Defense Console) implemented within the organization to gather data for suspected incident reporting • Coordinates with appropriate agencies, subscribers, and subordinate organizations to ensure that accurate information is documented and implemented as policy, guidance, Standard Operating Procedures (SOPs), Tactics, Techniques, and Processes (TTPs), or Concept of Operations (CONOPS) for IM activities in support of the mission and operational requirements of ARCYBER, Army, and DoD• Reviews intelligence products from internal/external sources in accordance with IM operating procedures• Completes a shift change briefing to ensure continuity of tasks to be accomplished with the incoming shift

Instruct Soldiers in methods of information security and networks.

Fort Gordon, Georgia

Worked as a network traffic analyst, managed a team of 30+ personnel

Fort Gordon, Ga.

Instructed new Soldiers in Cisco IT Essentials and Cisco CCNA which consisted of subnetting and basic router and switch configuration.

Service Desk Supervisor, Coordinated Video-Teleconferences, Managed the Remedy Trouble Ticket system for my organization.

Kuwait

Installed, maintained, conducted troubleshooting of communication equipment. Managed the organization training room and HR department as a junior level manager.

Instructed Soldiers on the safe installation of antennas of various heights. Instructed Soldiers in proper radio procedures and installation of communication equipment ensuring success once training was complete.

Performed troubleshooting and repairs on CH-47 electrical wiring.

Installed, maintained, and conducted troubleshooting on line of sight communications equipment ensuring leadership had the capability to communicate with peers.