•Supporting the Department of Veteran's Affairs Network and Security Operations Center (VA-NSOC)•Participating on Enterprise Network Defense (END) & Network Defense Center (NDC) teams•Overseeing a team of 9 cyber security engineers/analysts, as well as providing training/mentor support as needed•Performing network and security device monitoring/administration/management, including forensic analysis of questionable intrusion events•Executing NIPS/HIPS security event correlation utilizing operational intelligence platforms, including US-CERT's EINSTEIN 3.0 program•Auditing log management and access control on more than 700,000 end devices (including workstations, servers, laptops, and mobile devices)•Carrying out Incident Response (IR) in coordination with local facility Information Security Officers (ISOs) across the U.S•Implementing enterprise security on the nation's largest integrated health care system, with more than 1,700 hospitals, clinics, community living centers, domiciliary, readjustment counseling centers, and other facilities (2nd largest network in the United States)•Creating executive reports of analyzed network traffic and statistics; reviewed by executive management of the VA including VA Full-Time Equivalents (FTEs), VA Senior Executive Staff (SES), VA Integrate Operations Center (IOC), U.S. Government Accountability Office (GAO)•Reporting HIPAA compliance violations to US-CERT for both privacy related (PII & PHI) and non-privacy related (Malware) incidents•Proactively monitored highly customized SPLUNK dashboards

● Medical IT Systems Division – T4/EOCS contract with the U.S. Dept. of Veterans Affairs (VA)● Supporting the Department of Veteran's Affairs Network and Security Operations Center (VA-NSOC)● Participating on Enterprise Network Defense (END) & Network Defense Center (NDC) teams● Overseeing a team of 8 cyber security engineers/analysts, as well as providing training/mentor support as needed● Performing network and security device monitoring/administration/management, including forensic analysis of questionable intrusion events● Executing NIPS/HIPS security event correlation utilizing operational intelligence platforms, including US-CERT's EINSTEIN 3.0 program● Auditing log management and access control on more than 470,000 end devices (including workstations, servers, laptops, and mobile devices)● Carrying out Incident Response (IR) in coordination with local facility Information Security Officers (ISOs) across the U.S● Implementing enterprise security on the nation's largest integrated health care system, with more than 1,700 hospitals, clinics, community living centers, domiciliaries, readjustment counseling centers, and other facilities (2nd largest network in the United States)● Creating executive reports of analyzed network traffic and statistics; reviewed by executive management of the VA including VA Full-Time Equivalents (FTEs), VA Senior Executive Staff (SES), VA Integrate Operations Center (IOC), U.S. Government Accountability Office (GAO)● Reporting HIPAA compliance violations to US-CERT for both privacy related (PII & PHI) and non-privacy related (Malware) incidents● Responsible for pushing Sourcefire security enhancement updates (SEU), rules, and policy enforcement across 6 logical regions (4 geographically separated regions, including 2 administrative regions) across the United States and US territories

● Carrying out Incident Response (IR) in coordination with local facility Information Security Officers (ISOs) across the U.S ● Responsible for pushing Sourcefire security enhancement updates (SEU), rules, and policy enforcement across 6 logical regions (4 geographically separated regions, including 2 administrative regions) across the United States and US territories● Executing security event correlation utilizing operational intelligence platforms● Performing network and security device administration and management● Supporting the Department of Veteran's Affairs Network and Security Operations Center (VA-NSOC)● Participating on Enterprise Network Defense (END) & Network Defense Center (NDC) teams● Providing training/mentor support as needed● Performing network and security device monitoring, including forensic analysis of questionable intrusion events● Engineering NIPS/HIPS installation and support for SiteProtector, Splunk, Sourcefire traffic correlation● Creating executive reports of analyzed network traffic and statistics; reviewed by executive management of the VA including VA Full-Time Equivalents (FTEs), VA Integrate Operations Center (IOC), Government Accountability Office (GAO)● Reporting HIPAA compliance violations to US-CERT for both privacy related (PII & PHI) and non-privacy related (Malware) incidents● Auditing log management and access control on more than 470,000 end devices (including workstations, servers, laptops, and mobile devices)● Carrying out Incident Response (IR) in coordination with local facility Information Security Officers (ISOs) across the U.S● Implementing enterprise security on the nation's largest integrated health care system, with more than 1,700 hospitals, clinics, community living centers, domiciliaries, readjustment counseling centers, and other facilities (2nd largest network in the United States)