Joey Caddy Email & Phone Number

Nellis Air Force Base, Nv, Us

Nellis Afb, Nevada, United States

Leading from the front on a Quick Reaction Test (QRT) team to develop a CONOP and TTP's on how to bridge the gap between IT and OT while enhancing cyber attack detection utilizing MOre Situational Awareness for Industrial Control Systems (MOSAICS).

Nellis Afb, Las Vegas, Nv

Provides cyber operations subject matter expertise to the 805 CTS/ShOC-N Scenario Development and Exercise Execution Team.Works within a specialized team of experts, including external service and national agencies, to train established tactics, techniques, and procedures (TTP) relevant to air operations and air component capabilities.Assists in cyber scenario development to include the collection, consolidation and integration of deployed cyber unit training objectives into exercise scenario inputs and development of Master Scenario Event List (MSEL) and theater threat presentation (e.g. orders of battle, threat country tactics, etc.) to enhance exercise realism.Incorporates C2 lessons learned from service and joint experimentation, as well as exercises.Assists in the development and execution of advanced cyber TTPs.Provides training to White Force personnel and ShOC-N IT staff on current and emerging adversary cyber TTPs.During exercise execution, supports technical and operational assessment of cyber effects and assists briefing and debriefing training audience pre- and post-vul.Supports planning (Concept development, Initial Planning, Mid Planning, Final Planning), execution and Lesson Learned/TTP development for Red Flag events and other COCOM, USAFWC, and 505 CCW events.

Nellis Afb, Las Vegas, Nv

Defensive Cyber Operations Subject Matter Expert, conducts cyber exercise event planning for the 505th Test and Evaluation Squadron at the CAOC-N/Red Flag in support of Air Force cyber elements.

Fort Meade, Md

Conducts DCO within the Department of Defense Information Network (DoDIN) in Support of Defense Information Systems Agency (DISA) and the National Security Agency (NSA). I operate as a shift lead on an Incident Response Team that detects, identifies, monitors and reports adversarial activities, threats, malicious activity and vulnerabilities caused by misconfigurations. I’ve developed OPLAN’s (in accordance with JOPES) and conducted Cyber Hunt missions within the customer's network using SIEM tools and conducting sensor placement, sensor tuning, deep packet analysis, TCP/IP conversation reassembly, data carving, data triage and malware analysis.Tools: Splunk, Bro, ELK Stack, Stenographer, Gigmon, GigaVUE, Surricata, ELSA, Squil, McAfee ATD

Norfolk, Virginia

Directed 236 Vulnerability assessments on various DoD and Navy networks to identify vulnerabilities. Conducted forensic analysis on data to determine vulnerabilities and prepared final reports customers and data owners. Provided First Line of Defense (FLOD) technical training within 53 work centers to 320 IT Specialists to expand the knowledge base and reinforce principal security measures at the Tier 1 level.Tools: Bluescope, Qtip, SNARF, DNS Beacon Detect, Nessus, Retina, Nmap, SysInternals Suite.

Norfolk, Virginia

Led a network penetration testing team consisting of 17 highly trained Red Team operators. Conducted 12 physical and remote assessments of DoD and Navy networks to identify network vulnerabilities prior to real-world adversary exploitation, degrade C2C communication channels to force leadership decisions when networks are compromised, and identify process failures and trade craft knowledge gaps in the customer’s incident response efforts. Effectively communicated results by providing formal written reports based on thorough security assessments, analysis, and feedback. Developed and executed training for future Red Team operators in preparation for real-world and planned exercises.Tools: Kali Linux, Metasploit, Core Impact, Cobalt Strike, Canvas, In-house developed tools and scripts.

San Diego, California

Directed 236 Vulnerability assessments on various DoD and Navy networks to identify vulnerabilities. Conducted forensic analysis on data to determine vulnerabilities and prepared final reports customers and data owners. Provided First Line of Defense (FLOD) technical training within 53 work centers to 320 IT Specialists to expand the knowledge base and reinforce principal security measures at the Tier 1 level.Tools: Bluescope, Qtip, SNARF, DNS Beacon Detect, Nessus, Retina, Nmap, SysInternals Suite.

Pensacola, Florida

Led exploitation operations and employed all available technologies and techniques to exploit vulnerable networks in support of national mission requirements on high-priority targets. Produced periodic network characterizations and technical reports documenting research and analysis of key target networks. Gathered, analyzed, and reported on multiple high priority mission sets via network analysis. Performed as organization’s Senior Analyst, applying quality control on all multimedia serialized reporting and created new reporting standards that are still used today. Worked directly with Mission Management to provide guidance and analysis to meet time-sensitive and mission critical deadlines.

Virginia Beach, Virginia

Led a network penetration testing team consisting of 17 highly trained Red Team operators. Conducted 12 physical and remote assessments of DoD and Navy networks to identify network vulnerabilities prior to real-world adversary exploitation, degrade C2C communication channels to force leadership decisions when networks are compromised, and identify process failures and trade craft knowledge gaps in the customer’s incident response efforts. Effectively communicated results by providing formal written reports based on thorough security assessments, analysis, and feedback. Developed and executed training for future Red Team operators in preparation for real-world and planned exercises.Tools: Kali Linux, Metasploit, Core Impact, Cobalt Strike, Canvas, In-house developed tools and scripts.

Diego Garcia, British Indian Ocean Territory (Biot)

Administered a network of 250 nodes and clients. Developed and maintained installation and configuration procedures. Performed regular security monitoring to identify any possible intrusions. Performed daily backup operations. Ensured recovery tapes or disks were created, and media was recycled and sent off site as necessary. Repaired and recovered from hardware or software failures. Coordinated and communicated with impacted customers. Applied OS patches and upgrades on a regular basis, and upgraded administrative tools and utilities.

Chesapeake, Virginia

Administered a network of 450 nodes and clients. Developed and maintained installation and configuration procedures. Performed regular security monitoring to identify any possible intrusions. Performed daily backup operations. Ensured recovery tapes or disks were created, and media was recycled and sent off site as necessary. Repaired and recovered from hardware or software failures. Coordinated and communicated with impacted customers. Applied OS patches and upgrades on a regular basis, and upgraded administrative tools and utilities.

Pensacola, Florida

Computer And Information Systems Security/Information Assurance

-Electronic Theory and Maintenance (Electrician) -Cryptologic Technician (Maintenance) -Information Systems Administrator (ISA) -Network.

Cyber Professional Development

NT100 Network Traffic Analysis - Students Learn: -Internet-Based Open Source Research -Wireshark Protocol Analyzer -Effective Capture.

Cyber Professional Development

Activities and Societies: 1010 - Computer Network Exploitation (CNE) Bootcamp OBJECTIVE: Develops each stage of offensive operations.

Information Design Assurance Red Team (Idart)

High School Diploma

Activities and Societies: 1993-1997 Yearbook Editor