Joshua M Mccoid Email & Phone Number

United States

• Conducted comprehensive security assessments on Elasticsearch clusters, identifying and remediating vulnerabilities to enhance the platform's resilience against potential cyber threats.• Evaluated and selected third-party security tools to integrate with Elasticsearch, augmenting the platform's security capabilities and reducing attack surfaces. • Collaborated with development teams to optimize query performance and index designs, resulting in significant reductions in query response times and increased system efficiency• Engineered secure Elasticsearch access controls by implementing role-based access control (RBAC) policies, restricting system privileges based on user roles and responsibilities.

Home

• Collaborated with senior offensive security engineers to analyze and exploit security vulnerabilities, gaining hands-on experience with various tools and techniques commonly used in offensive security testing.• Conducted research on the latest attack vectors and security vulnerabilities, contributing to the team's knowledge base and assisting in the development of custom exploits.• Actively contributed to team meetings and brainstorming sessions, sharing insights and ideas to improve offensive security practices within the organization.

Scott Air Force Base

• Served as developer of practical evaluation scenarios for assessing technical abilities of 300+ cyber security analysts across five organizations, in performing defensive cyberspace operations in support of DoD objectives. • Ensured compliance of all personnel with local, Air Force, and U.S. Cyber Command directives by managing the organization's training and evaluations documentation, audits, and record discrepancies. • Lead and oversaw 13 evaluators conducting 90+ assessments each year and documented training trends, knowledge gaps, and lessons learned, while providing follow-up training to ensure cyber security analysts met Air Force and United States Cyber Command requirements.• Conducted 180+ assessments in response to changed standards in less than 1 year, ensuring operational readiness for 90+ analysts.

Scott Afb, Illinois, United States

• Lead all facets of the cyber protection team, including configuration, installation, investigation, enhanced threats, anomalies, intrusions, errors, and malware. Developed innovative solutions for mitigating host vulnerabilities, collecting/visualizing host logs and implementing patch management. • Consulted on the development and implementation of security policies across multiple organizations within the Department of Defense, based on vulnerability assessments. • Created 50+ threat hunting script suite to address MITRE ATT&CK Matrix defined Tactics, Techniques and Procedures (TTPs).• Researched and tested exploitation TTPs for 30+ APTs to identify security gaps across DoD systems, in addition to training and equipping fellow Airmen.

Seymour Johnson Afb, North Carolina

• Managed a 24/7 Network Operations Center (NOC), providing technical and communications support to multiple divisions made up of 6,000 personnel and a $5.5B aircraft fleet • Lead system administrator and trainer for division cyber communications system on unclassified / classified networks • Directed information protection systems, protecting a $17M network from malicious logic, software, and hardware vulnerabilities • Lead network security incident response technician, evaluating / remediating verified security vulnerabilities, reporting results to Network Operations Security Center and division headquarters• Lead four-member vulnerability management team utilizing Nessus to scan/patch classified and unclassified networks, while also authoring cyber security SOPs, effectively mitigating 800K threats ahead of cyber readiness inspection