Jonathan Pine Email & Phone Number

Mountain View, California, Us

Mountain View, California, Us

Mountain View, California, Us

Baltimore, Maryland, Us

• Provided Incident Response support for T. Rowe Price serving as both the Incident Lead and individual contributor during high impact incidents• Served as a subject matter expert providing training to and mentoring junior analysts.

Baltimore, Maryland, Us

• Investigated network and host-based intrusions across the global enterprise utilizing disk and memory forensics, triage malware analysis, PCAP analysis, and log review in Splunk. Tools used: EnCase, OLEdump, Volatility, Carbon Black, PeStudio, WireShark, Yara Rules, Splunk, RiskIQ, Multiple Sandboxes.• Performed digital forensic analysis to support insider threat and potential host compromise investigations. Tools used: Kape (Kroll Artifact Parser and Extractor), Volatility, EnCase, FTK.• Designed, implemented, and reviewed Carbon Black watch lists, Yara Rules, Splunk alerts and dashboards based on previous incidents, threat hunts, and emerging threat intelligence. Tools used: MISP, Carbon Black, Splunk, Yara Rules, ObserveIT.• Worked closely with the Fraud Team and assisted in discovering small and large-scale fraud activities that affect participant companies.• Collaborated on and authored playbooks to enhance workflow/processes based on best practice, in-the-field experience, thereby reducing the time to detect, respond to, and contain incidents.

• Incident Response: Active on the Booz Allen fly-away team providing short-notice Digital Forensic and Incident Response (DFIR) capabilities during a suspected breach. Specific areas included intrusion analysis, dynamic malware analysis, business email compromises and forensic investigations. (Tools used: FTK, EnCase, SysInternals, Volatility, Registry Explorer, PhotoRec, Regshot, FakeNet, Yara Rules)• Vulnerability Management: Created and lead the Vulnerability Management program for a client including weekly vulnerability scans, static code analysis, and assistance with the creation of a patch management program. (Tools used: Qualys WAS, Qualys VM, Burp Suite.)• Cyber Security Operations: Assisted in creating a next generation Security Operations Center (SOC) for a global client by developing Incident Response runbooks and IR requirements for Azure & AWS.• Provided tier 1, 2 and 3 augmented SOC analyst support for various commercial clients including creating Splunk dashboards and correlation searches. (Tools used: Splunk, SplunkES, CrowdStrike Falcon, FireEye HX, Palo Alto Wildfire, Palo Alto Panorama, Cisco IronPort, VirusTotal, OSINT.)• Recognized for outstanding client delivery at Booz Allen Hamilton leading to a contract extension and scope increase for one client engagement

Winter Break 2013-2014• Prepared a gap analysis of current Maryland Aviation Administration (MAA) IT systems and security infrastructure• Wrote an MAA IT security policy that complies with Department of Information Technology (DoIT) policy and other aviation industry regulators• Completed a Transportation Security Administration (TSA) Red Badge and Sensitive Security Information (SSI) background investigationSummer 2014• Helped design the IT Master Plan (ITMP) for the Atlanta Airport (ATL)• Assessed all current Main Distribution Frame (MDF) and Intermediate Distribution Frame (IDF) rooms including making network diagrams and assessing the rooms in accordance to Building Industry Consulting Service International (BICSI)• Conducted gap analysis of all IT systems in ATL

• Assisted organizations with transition from DIACAP to RMF• Assisted in categorization of systems per FIPS 199• Reviewed applicable controls NIST 800-53• Reviewed and edited training material for RMF training course• Implemented and managed Kindle Whispercast

Radford, Va, Us

• Coordinated and planned annual collegiate shooting competitions with various schools in the Virginia area• Train new team members on proper and safe fire arm handling• Worked directly with the president handling finances and overseeing twenty team members.

Radford, Va, Us

Responsible for the maintenance of the Radford University Skeet and Trap Club's website. Redesigned the site in order to further the outward appearance of Radford Skeet and Trap to potential company sponsors and other academic institutions. Implemented using HTML, CSS and Javascript. Site can be view at www.radford.edu/rodgun

Radford, Va, Us

• Supervised 50 Radford University students • Planned and scheduled student events• Provided information and programming for residents. Requires extensive knowledge of all facets of University policy and student issues• Monitored all activities at Davis St. Apartments, Calhoun St. Apartments, and Greenhill Apartments to assure resident safety• Counseled residents and mediated roommate disputes and referring residents to further help if necessary

Radford, Va, Us

• Designed interactive labs for high school students to build awareness and expertise in all facets of cyber security• Researched exploits used for simple cyber-attacks and how information is gathered about a user focusing on later use in data mining• Created easy-to-follow labs that included research topics (exploits and information gathering) and an introduction to JavaScript and virus writing• Collaborated with team members in designing a comprehensive curriculum to teach high school students most effectively

• Analyzed firewall, router, and web server logs for suspicious activity (Tools used: ArcSight)• Developed custom reports to assist with identifying security violations using DoDD 8500.1 and DoDI 8500.2 and NIST 800-53• Collected and analyzed network packet captures (Tools used: Wireshark and TCP Dump)• Responded to and investigated IDS alerts; submited incident reports as required • Assessed security posture of Defense Travel System (DTS) lab environment• Executed vulnerability scans in the DTS lab environment (Tools used: OpenVAS, nmap, HBSS ePO)• Analyzed scan results and prepared remediation plans• Created Information Assurance (IA) Design Document of DTS lab environment• Created Ports, Protocols, and Services spreadsheet for DTS lab environment • Racked and built new Windows 2012 servers and preformed STIG remediation (Tools used: SCAP Compliance Checker, STIG Viewer)• Implemented and configured Windows Server Update Services (WSUS) in the lab environment

Baltimore, Maryland, Us

• Re-imaged laptops, replaced computers and printers across campus, responded to help desk requests• Performed extensive troubleshooting of system problems and set up computers for new teachers• Performed network and switch set up. • Gained expertise helpdesk services as well as an understanding of networks and in a high school IT environment.

Bachelor'S Degree, Computer Systems Networking And Telecommunications

Minor, Business And Techincal Writing