Joseph Mercado Email & Phone Number

United States

● Formulated raw intelligence and analysis into finished actionable cyber threat intelligence reports and briefings torecommend mitigation techniques and controls to customers and stakeholders, including executive leaders andgovernment partners. Published over 10 reports on malicious cyber activity, malware campaigns, and Tactics,Techniques, and Procedures (TTPs) used by Advanced Persistent Threats (APTs).● Independently analyzed and identified multiple nation-state-backed groups/Advanced Persistent Threats (APTs)command and control (C2) network infrastructure utilized for phishing and malware campaigns. Researched andanalyzed risks/threats posed by these groups to profile threat actor behavior, intent, and capabilities using theCyber Kill Chain, Diamond Model, and MITRE ATT&CK framework.● Conducted digital forensics analysis on disk images and memory dumps from host machines to identify Indicatorsof Compromise (IOCs) and Indicators of Attack (IOAs) of malicious cyber activity in order to support detailedthreat intelligence on vulnerabilities and mitigations.● Conducted in-depth network and packet capture analysis from sources such as firewall logs, Intrusion DetectionSystem (IDS) alerts, and system logs, using tools like Wireshark to assess risks, identify threat actors, and supportcyber threat intelligence products.● Collaborated closely with internal and external government stakeholders to investigate and report on APTmalicious cyber activities, providing actionable intelligence that enhanced detection capabilities, supportedmitigation strategies, and facilitated incident response.● Led a team that conducted rapid actor/persona and network analysis in response to cybersecurity incidents on critical infrastructure. Findings resulted in attribution to a nation-state APT group conducting active exploitation and malware campaigns.

Arlington, Virginia, United States

• Logged and kept record of over 500 reported IT assets, ensuring accountability of assets. Gathered and compiled recorded data for Threat Hunting Branch Accountable Property Audit Reconciliation.• Collected and compiled Threat Hunting Branch vendor/product tool information (licenses, use cases, product details, etc.) for record-keeping and account management effort.• Developed an account management and support system for account provisioning/deprovisioning. • Automated a variety of workflows using Power Automate including vendor roster RFIs,troubleshooting/equipment issue tracking, and account management support.• Composed current Standard Operating Procedures for Account Management Work Instructions.

• Co-authored “The Future of Virtual Internships” for the Summer 2020 NICE eNewsletter.• Conducted research and evaluated select competency models to support the inclusion ofcompetencies in the NICE Cybersecurity Workforce Framework (NIST SP 800-181).• Conducted interviews with organizations in government, industry, and academia regarding their NICE Cybersecurity Workforce Framework (NIST SP 800-181) use cases. Followed up with completed written NICE Framework Success Story articles on Framework feedback.• Supported planning phase of campaign to increase cybersecurity career awareness and engagement.Campaign supported by VISA, Norton LifeLock, and the National Cyber Security Alliance. Supportincludes research of cybersecurity in media, film, television, social media, pitching ideas for futurecampaigns, and methods to change social perception of cybersecurity.• Held Webinar Series Technical Support role in webinars with over 100+ participants from government, industry, and academia. Managed administrative webinar privileges and tasks on the backend.• Aid in NICE Webinar Series Technical Support role in webinars with well over 100+ participants from government, industry, and academia.

San Bernardino, California, United States

• Organized and prepared Inland Empire Regional Mobility Dialogue Series events by setting upconference rooms, presentations, and addressed speakers’ needs in a timely manner.• Collected data on Inland Empire socioeconomic indicators for a regional dashboard.• Edited and transcribed videos from Inland Empire Mobility Dialogue Series utilizing Adobe Premiere.• Researched literature for formal review of transportation in the Inland Empire.• Reviewed, revised, and created outlines for multiple research papers focused on logistics andtransportation in the Inland Empire.

Bachelor'S Of Science In Information Systems And Technology, Cyber Security, 3.9

3.98