Jesse Pfeiffer Email & Phone Number

Monroe, Wa, Us

Redmond, Washington, Us

TPM for Global Hunting Oversight and Strategic Triage (GHOST)

Redmond, Washington, Us

Managing the the MSRC M365 Incident Response team.

Redmond, Washington, Us

• Coordinated and lead response to major security incidents, preforming counter-adversary operations(evictions), adversary assessment (nation-state to insider threat), establishing communications toexecutive staff and public media, and developing security guidance (patching and tools) for Microsoftcustomers• Developed Blue Team response playbook for penetration testing• Lead the most successful defense in Red vs Blue engagements since the inception of pen tests within thecorporate division, fully evicting the adversary team• Established and lead centralized defender response to adversary incidents, including developingorganizational specific battlecards used during events.• Streamlined security engagement process and ticket management system within Response Team. Thischange enabled incident trend reporting to leadership team by capturing case metrics (incident types,incident by product groups, and TTx reporting).

Redmond, Washington, Us

• Remote access Service Owner, providing backend/frontend/cloud RDP connectivity for major products. Access verified through intricate Identity Management services and 2FA. 99.999% availability maintained over lifetime. • Solely migrated the remote access service from bare metal to Azure. Accomplishments include providing connectivity to private IP space, international load balancing, and segregating US Gov services in sovereign directory. • Managed all audits (FedRamp and SOC) for the service. Extended audit coverage for all workloads on boarded to the service. Example, I was responsible for large portion of EXCHANGE’s remote access compliance. • Developed PowerShell script to patch bare metal environment where Windows Update and WDS was not an option. Script’s success includes navigating multiple credential boundaries and threaded operation.

Seattle, Wa, Us

Originally hired to support Secure Credential Access Manager (SCRAM), I took on additional responsibilities which eventually became the foundation of the Secure Access First Response (SAFR) team. As a result the team grew from solely managing smart cards and user access to include SCRAM, multi-tenant environments (AD), remote desktop gateway services, FIM management, hardware maintenance and patching - all across multiple domains. By reorganizing, optimizing and automating tasks (largely through PowerShell) I was able to free enough man-hours to create a rotating project team charged with designing, developing and implementing service improvements. Additionally my input was regularly sought during interviews filling positions within the team.MICROSOFT ACCOMPLISHMENTSPATCHINGOrganized patching 400+ servers across multiple domains running several different services.• Established WSUS/hardware patching cycle verified through patching and vulnerability scanning SECURE CREDENTIAL ACCESS MANAGER (SCRAM)Maintained SCRAM installations (including support) within multiple environments for thousands of customers.• Managed upgrade and patching cycles• Established backup plans• Drove and implemented DKM (Distributed Key Manager) installation within government secured environments to increase securable securityOTHER• Built and installed automated FIM certificate renewal script which alerted users when their smart cards were nearing expiration.• Through PowerShell automated service account password rolls for the team’s managed services.• Scripted a SCRAM onboarding tool which graphed service usage. It was important to monitor the acceptance of new SCRAM instances.• Established a rotating project team amongst the vendors to address outstanding issues whose solutions required a significate time investment. This team also augments FTE’s projects when requested.

Washington, Dc, Us

• Designed and Deployed Website to Track Technical BulletinsAction: Designed and developed website to track, manage and centralize resources for systems installations and upgrades.Result: Provided valuable resource to senior command management and peers through simple, yet highly informative and dynamic web-driven forms.Impact: Supplied quantifiable snapshot of an extensive on-going process to create enforceable accountability. Expedited on-time completion rates, decreased total man-hours. Drastic reduction of paper consumption was directly attributed to the designed website. Additional impact – significant cost savings.• Managed Telephony Renovation During Office Building OverhaulAction: Simultaneously managed two telephony cutover projects where demarcation closets were relocated and the facility’s low voltage cable was revamped. Personally accountable for successful completion of both projects.Result: Provided seamless operational network and telephony functionality in both temporary offices and upon resuming work functions in original units.Impact: Allowed Search and Rescue and medical personnel to operate with no interruptions in delivery of services.• Developed ASP website with MS Access backend to assign, track and manage Time Compliant Technical Orders (similar to Microsoft’s Technical Bulletins). Installed Server 2008r2 IIS 7.0 role to launch site.• Developed MS Access database mirroring the USCG Sector Key West base’s eOn Millennium telephony switch resulting in directly reducing telephone move / add / change request order completion time by at least 50%. The database was used as a critical reference document to upgrade and relocate existing telephony switch to a new building.• Developed CMD script and technician policy to streamline routine data transfers between shore and cutter servers. Process originally 24hour+ evolution was changed to less than 4 hours of data syncing and only 20 minutes where the crew was logout out.