Jesse Pfeiffer Email & Phone Number

Monroe, WA, US

Redmond, Washington, US

TPM for Global Hunting Oversight and Strategic Triage (GHOST)

Redmond, Washington, US

Managing the the MSRC M365 Incident Response team.

Redmond, Washington, US

• Coordinated and lead response to major security incidents, preforming counter-adversary operations(evictions), adversary assessment (nation-state to insider threat), establishing communications toexecutive staff and.
• Developed Blue Team response playbook for penetration testing
• Lead the most successful defense in Red vs Blue engagements since the inception of pen tests within thecorporate division, fully evicting the adversary team
• Established and lead centralized defender response to adversary incidents, including developingorganizational specific battlecards used during events.
• Streamlined security engagement process and ticket management system within Response Team. Thischange enabled incident trend reporting to leadership team by capturing case metrics (incident types,incident by product.

Redmond, Washington, US

• Remote access Service Owner, providing backend/frontend/cloud RDP connectivity for major products. Access verified through intricate Identity Management services and 2FA. 99.999% availability maintained over lifetime.
• Solely migrated the remote access service from bare metal to Azure. Accomplishments include providing connectivity to private IP space, international load balancing, and segregating US Gov services in sovereign.
• Managed all audits (FedRamp and SOC) for the service. Extended audit coverage for all workloads on boarded to the service. Example, I was responsible for large portion of EXCHANGE’s remote access compliance.
• Developed PowerShell script to patch bare metal environment where Windows Update and WDS was not an option. Script’s success includes navigating multiple credential boundaries and threaded operation.

Seattle, WA, US

• Originally hired to support Secure Credential Access Manager (SCRAM), I took on additional responsibilities which eventually became the foundation of the Secure Access First Response (SAFR) team. As a result the team.
• Established WSUS/hardware patching cycle verified through patching and vulnerability scanning SECURE CREDENTIAL ACCESS MANAGER (SCRAM)Maintained SCRAM installations (including support) within multiple environments for.
• Managed upgrade and patching cycles
• Established backup plans
• Drove and implemented DKM (Distributed Key Manager) installation within government secured environments to increase securable securityOTHER
• Built and installed automated FIM certificate renewal script which alerted users when their smart cards were nearing expiration.

Washington, DC, US

• Designed and Deployed Website to Track Technical BulletinsAction: Designed and developed website to track, manage and centralize resources for systems installations and upgrades.Result: Provided valuable resource to.
• Managed Telephony Renovation During Office Building OverhaulAction: Simultaneously managed two telephony cutover projects where demarcation closets were relocated and the facility’s low voltage cable was revamped..
• Developed ASP website with MS Access backend to assign, track and manage Time Compliant Technical Orders (similar to Microsoft’s Technical Bulletins). Installed Server 2008r2 IIS 7.0 role to launch site.
• Developed MS Access database mirroring the USCG Sector Key West base’s eOn Millennium telephony switch resulting in directly reducing telephone move / add / change request order completion time by at least 50%. The.
• Developed CMD script and technician policy to streamline routine data transfers between shore and cutter servers. Process originally 24hour+ evolution was changed to less than 4 hours of data syncing and only 20.