John Martineau Email and Phone Number

• Perform incident response and proactive threat hunting on corporate and industrial control environments.• Analyze host end points, at scale, utilizing Tanium, FireEye MIR/HX and SPLUNK for evidence of compromise.• Utilized commercial and open source tools to perform forensic imaging and analysis on disks and memory.• Advise and assist the U.S. government in defending against emerging threats.• Test forensic and analytical tools and present findings for fly the away kit and media analysis enhancement.• Write and deliver incident reports and recommendation memorandums to HIRT constituents.• Brief executive leadership, law enforcement agencies, and international partners on technical findings.• Developed an engagement tracker for onsite incident response tracking and to stream line report writing.• Created and maintained a forensic VM to help aid in analysis on customer sites and at home base.• Create, modify and update Indicators of Compromise (IOCs) for use within host-based analysis tools.• Manage and mentor the host forensic group contract staff on incident response, threat hunting and analysis methodologies.

• Adhere to best forensic practices when receiving, imaging and examining media.• Utilize commercial forensic tools to perform forensic examinations on Windows and OSX devices.• Perform registry and timeline analysis to determine file system and user activity.• Identify and analyze malware utilizing Volatility, Registry, Volume Shadow Copy and virtual machine analysis.• Perform acquisition and analysis of Android, iOS and BlackBerry devices using Cellebrite, XRY, Oxygen and Magnet Acquire.• Perform comparative analysis to determine changes in media over time.• Create and review reports tailored to customer requests.• Lead forensic examiner in support of military personnel performing digital media handling, acquisition and exploitation.• Train and on-board new team personnel.

Automation consultant bringing data centers from physical to virtual environments. Work extends to BMC Cloud Lifecycle Management as well as Hyper-V, VMWare, AWS, and Hotlink.• Implemented BMC Bladelogic Cloud Lifecycle Management solution in a lab environment for testing and installation validation. o Created online and offline patching catalogs for RHEL and Windows servers. o Created auto RSCD Agent push and patch analysis jobs for RHEL and Windows servers in production environment.• Implemented BMC Bladelogic Decision Support for Server Automation in a lab environment for testing and installation validation.• Implemented multi-forest Citrix VDI solution based on XenDesktop 5.6 on VMWare ESX 5.1 virtualization infrastructure with Wyse Zero Client hardware.• Implemented Oracle database instance on RedHat Linux 6.2•Led consulting opportunity for large DoD Enterprise supporting BMC Software Bladelogic Server Automation and Cloud Lifecycle Management.•Responsible for custom CLM Service Offerings and software deployment options consisting of COTS software components for both Windows and UNIX environments.•Performed support and daily operational activities to ensure health status of BMC CLM components.

• Create, edit and disable permissions for Active Directory (AD) user accounts.o Includes work with Active Directory User Computer (ADUC) and Exchange Server 2007 Admin Tools.• Utilize SDE to track work orders and requests assigned to the group.• Perform security assessments for new, third party business services.o Includes ASP security assessments analyzing access, technical, and physical controls.o Assess company CIA (Confidentiality, integrity, availability).• Analyze web sites for HIPAA/HITECH compliance and PHI protection for business use.• Implement upgrades of eXactACCESS Single Sign-On (SSO) product at seven facilities.o Documented specific steps on installation, removal, and implementation of eXactACCESS for facilities.• Develop, edit and implement containers/wrappers for applications to launch from SSO.o To date, have created and revised more than 20 wrappers• Create and maintain documentation on specific steps to deploy wrappers.• Created and maintain SharePoint space for third party and internet access forms eliminating paper copies.• Provide technical support for eXactACCESS SSO and Citrix as related to the eXactACCESS product.• Tested a proximity badge solution for user logon, currently being implemented.• Perform quarterly audits of applications in eXactACCESS to verify correct user access, usage, and passwords are being used.• Collaborate daily with groups from all facilities on application, project, and problem solutions.• Tested and implemented a VDI solution for physician access and logon.

Provided technical support for PC and Mac hardware and software issues.Imaged and managed PCs using Altiris Deployment Console.Developed documentation for projects as needed.Received, imaged, and prepared all equipment for support techs to deploy in the field.Performed regular large scale inventories of all computer related equipment.Maintained several Microsoft Outlook forms for upgrade requests and inventory changes from techs.Maintained a database in Access to track outgoing and incoming computers for upgrades and new equipment.Maintained a database in Access to track all outgoing computer disposals, digitizing, automating, and improving the disposition paperwork for ease of use and auditing.Utilized Service Desk Express (SDE) to keep track of campus inventory and establish work orders.Tested and suggested the use of the Credant software for standard campus encryption.Coordinated upgrade process of computers.Lead post doctoral program for Logistics.

- Diagnosed and solved customer PC issues.- Advised customers on PCs and peripherals that would fit them.- Advised customers on software appropriate to solve their issues.