Heath U. Email & Phone Number

South Carolina, United States

Planned, executed, and briefed offensive cyber operations including phishing exercises, vulnerability assessments, penetration tests and sophisticated threat emulation for commercial and government clients. Developed and refined documentation to enable more consistent and streamlined engagements. Developed incident response procedures and led a ransomware response team from attacker negotiations to recovery status.

Engaged in sophisticated network operations against US critical infrastructure including US election systems, venues of mass gathering, and various governmental departments and agencies to determine and advise on weak points within their respective external and internal security implementations. Tested and evaluated a large-scale incident response platform centered on threat intelligence and communications.

Developed a comprehensive, multi-staged Purple Team/Cyber Exercise program that focused on leveraging current attacker TTPs to more fully engage the Incident Response chain which produced a more trained and focused team of network defenders. Additionally, led full-spectrum red team operations and developed business offerings such as red team as a service, and continuous attack surface monitoring to further promote early threat detection.

Dublin 2, Ie

Engaged in persistent and sustained Red Team operations against client office networks and worldwide datacenters. To better enable these operations, developed new attack techniques and custom tooling to accommodate the diverse and dynamic target sets. Additionally, tested IoT products to discover zero-day or undiscovered vulnerabilities before product release.

Rome, Ny, Us

Researched nation-state threat actors and corresponding government affiliations to determine desired outcomes against US national interests. This was paired with conducting technical and strategic analysis on collected data to derive facts, inferences and projections regarding cyber actor capabilities, intentions, and likelihood of attack, to produce detailed reports on unique threats and threat profiles, to national leadership. Supported strategic cyber operations with partner agencies by providing tactical intelligence that enabled numerous successful cyber operations.

Hanover, Md, Us

Planned and executed “Red Team/OPFOR” exercises to engage multi-joint forces response capability to various cyber attack scenarios.Researched, developed, and created cyber attack techniques and strategies for DoD Cyber ExercisesAnalyzed malware such as RATs and BOTs to discover techniques that would be useful for threat emulationDeveloped and taught original course material on cyber attack methodologies and supported hands on learning objectives for KEYW's Offensive Methodology and Analysis. Installed, configured, managed, and automated a comprehensive virtual training network designed to allow for the testing of complex vulnerability assessment style operations.Automated the installation of a complex product used by law enforcement agencies worldwide. This program eliminated the need of having a technician at each site for installation.

Herndon, Virginia, Us

Performed forensic analysis and using open source forensic tools and reverse malwaretechniques on multiple platforms to detect malicious activityDeveloped scenarios and expanded suite of regression tests to include previously undefinedmethods for testing tool functionality in new operating environmentsBuilt an environment for testing various scenarios on various hardware platforms which resultedin significantly reduced times for both multiple and individual testsAdministered projects for code integration and test automation

Hanover, Md, Us

Led a remote installation team that installed and configured an end-to-end training networkconsisting of ESX servers, Cisco routers and switches, storage arrays, and computerworkstationsCreated course curriculum and practical exercises designed to to test students ability to recognize and react to a compromised network.Tested custom and open source tools against the virtual hardened network

Global, Us

Provided specialized Information System Security support integral to the Client's missionthrough analysis activities, incident response, and Information System Security Office servicesResponsible for security assurance of customer networks and information systems as a member of the NSA/CSS Information Systems Incident Response Team (NISIRT)Routinely used custom and open source tools to monitor the customer network andprovide feedback and reporting on malicious activity and fraud waste and abuse cases

Arlington, Virginia, Us

Conducted Operations meant to deny, disrupt, or degrade enemy communications in support of DoD operations.Analyzed computers and networks for vulnerabilities to determine weaknesses in them and subsequently exploit them for access during penetration testing in a "Red Team" environment.Conducted vulnerability/external penetration testing and intrusion detection monitoring to prevent future penetrations of U.S. military systems.Worked numerous Sensitive Reconnaissance operations (SRO) missions as a SIGINT analyst and was instrumental in resolving mission manning problems that enabled the Advanced Quick look (AQL) Electronic Intelligence mission to effectively provide direct intelligence support.Provided near real time Signals Intelligence Analysis necessary for support of several field readiness exercises.