Joshua M Mccoid Email & Phone Number

United States

• Conducted comprehensive security assessments on Elasticsearch clusters, identifying and remediating vulnerabilities to enhance the platform's resilience against potential cyber threats.
• Evaluated and selected third-party security tools to integrate with Elasticsearch, augmenting the platform's security capabilities and reducing attack surfaces.
• Collaborated with development teams to optimize query performance and index designs, resulting in significant reductions in query response times and increased system efficiency
• Engineered secure Elasticsearch access controls by implementing role-based access control (RBAC) policies, restricting system privileges based on user roles and responsibilities.

Home

• Collaborated with senior offensive security engineers to analyze and exploit security vulnerabilities, gaining hands-on experience with various tools and techniques commonly used in offensive security testing.
• Conducted research on the latest attack vectors and security vulnerabilities, contributing to the team's knowledge base and assisting in the development of custom exploits.
• Actively contributed to team meetings and brainstorming sessions, sharing insights and ideas to improve offensive security practices within the organization.

Scott Air Force Base

• Served as developer of practical evaluation scenarios for assessing technical abilities of 300+ cyber security analysts across five organizations, in performing defensive cyberspace operations in support of DoD.
• Ensured compliance of all personnel with local, Air Force, and U.S. Cyber Command directives by managing the organization's training and evaluations documentation, audits, and record discrepancies.
• Lead and oversaw 13 evaluators conducting 90+ assessments each year and documented training trends, knowledge gaps, and lessons learned, while providing follow-up training to ensure cyber security analysts met Air.
• Conducted 180+ assessments in response to changed standards in less than 1 year, ensuring operational readiness for 90+ analysts.

Scott AFB, Illinois, United States

• Lead all facets of the cyber protection team, including configuration, installation, investigation, enhanced threats, anomalies, intrusions, errors, and malware. Developed innovative solutions for mitigating host.
• Consulted on the development and implementation of security policies across multiple organizations within the Department of Defense, based on vulnerability assessments.
• Created 50+ threat hunting script suite to address MITRE ATT&CK Matrix defined Tactics, Techniques and Procedures (TTPs).
• Researched and tested exploitation TTPs for 30+ APTs to identify security gaps across DoD systems, in addition to training and equipping fellow Airmen.

Seymour Johnson AFB, North Carolina

• Managed a 24/7 Network Operations Center (NOC), providing technical and communications support to multiple divisions made up of 6,000 personnel and a $5.5B aircraft fleet
• Lead system administrator and trainer for division cyber communications system on unclassified / classified networks
• Directed information protection systems, protecting a $17M network from malicious logic, software, and hardware vulnerabilities
• Lead network security incident response technician, evaluating / remediating verified security vulnerabilities, reporting results to Network Operations Security Center and division headquarters
• Lead four-member vulnerability management team utilizing Nessus to scan/patch classified and unclassified networks, while also authoring cyber security SOPs, effectively mitigating 800K threats ahead of cyber readiness.