Automate cybersecurity investigation and incident response workflows through Splunk Phantom. This automation standardizes processes and reduces time required to remediate security incidents: - Integrate and maintain remote and local 3rd party APIs to enable automation.- Design processes to integrate Splunk ES, Phantom, and ServiceNow (ticketing system).- Configure Splunk searches for forwarding events to Splunk Phantom.- Develop automation playbooks for individual tasks and complete workflows.- Integrate investigation workflows into MITRE ATT&CK-based Phantom Workbooks.

Monitored the second largest Federal network in the United States containing sensitive data of more than 130 million Americans covered by the Centers for Medicare and Medicaid Services’ programs. The network included more than 220 federal information systems located across 50 data centers and cloud service providers:- Correlated heterogeneous data using SIEM, PCAP, and other log sources to conduct security analysis and validate cyber threats and attacks.- Implemented mitigation measures through host-based EDR and AV suites along with network-based IDS, dedicated firewall, and web-application firewall solutions to prevent repeat incidents.- Led technical investigations for inter-organization Incident Response.

As Incident Coordinator with the Incident Management Team, I Led teams through the Incident Response lifecycle for cybersecurity and privacy investigations.- Wrote a PowerShell tool to replace use case-specific scripts with a centralized application used for all mass email communication.- Coordinated Incident Response efforts of the Security Operation Center, Pen Testing, Forensic Malware, Engineering, and Threat Intelligence teams.- Maintained agency-wide playbooks, security exercises, and contact lists to decrease investigation, eradication, and recovery time.

- Provided tier 1 telephone, email, and chat technical support.- Documented work with proprietary ticketing system.- Installed, configured, and troubleshot Linux and Microsoft server operating systems, hardware, and networking.- Installed, configured, and troubleshot hosted domain software, hardware, and networking.- Installed miscellaneous datacenter hardware, cabling, and monitoring systems.

This is an unpaid, trainee position.Developed Java EE Application to evaluate consumer credit risk.- Developed application in Kepler IDE running on JBOSS app server.- Formed JDBC application connections with Oracle database.- Developed back-end logic using Java and SQL.- Developed front-end presentation using HTML, JSP, and Servlets.- Developed action steps for test cases and application flows for use case.