Maria D. Email & Phone Number

Washington, Dc, Us

San Jose, California, Us

Mclean, Va, Us

SIGINT Discovery/ Threat Analyst, 12/2018 – Present • Performs malicious behavior discovery support to DoD Cyber Discovery mission by conducting malware analysis/data manipulation using multiple databases and tools (both government and commercial) to quickly find patterns, relationships and indicators of compromise (i.e. services, network connections and file system) from the suspect binary. • Proactively hunt threats to minimize impact to the mission by gathering and researching information on the behavior, goals, and methods of adversaries. • Performs malware triage using both static and dynamic analysis to identify malicious command and control (C2) infrastructure and ultimately threat actor attribution. • Writes fingerprints/signatures to assist in identifying malware. • Provided expert analysis and reporting in response to time sensitive requirements for support to Federal customers.Cyber Software Tester 06/2018-12/2018• Worked with a DevOps team developing state-of-the-art Case Management tool using Docker which provide automated integration of the various components. • Reviewed Business and Software Specification Requirements to achieve better understanding of the platform.• Coordinated and ensured that documentation is written, edited, reviewed, and approved in a timely manner to meet established deadlines. • Understand and perform testing via Docker container technology.• Participated in the test environment setup and in ensuring the test tools and scripts are in place to successfully perform the required testing effort to better identify defects, document errors and implemented their resolutions.• Update team with the latest tools and security recommendations, etc. via Slack channel and email. Major Accomplishments: • Wrote the Case Management platform’s Standard Operating Procedures (SOP), FAQ, User Guide and updates via Github. • Supported the marketing by designing the Case Management tool's slicksheet.

Supports the creation and implementation of a malware analysis Test lab (i.e. configuring VirtualBox, Linux and Windows OS, malware analysis tools -REMNUX, etc.) that captures and performs both static and dynamic analysis of various types of malware (i.e. RAT/APT, Flash, malicious EXE, etc.) for research purposes. • Exploit system vulnerabilities using Metasploit focusing on the various stages of exploitation (i.e. reconnaissance, payload, exploit, persistence, etc.) • Writes technical reports that details the analysis of the malware as well as the defensive countermeasures to prevent future malware attacks. • Use threat research to develop actionable intelligence to drive customer (DHS) protection to include producing analysis (i.e. monthly summary reports, etc.) to inform countermeasure development. • Participates in team's brainstorming sessions to generate useful ideas for client's presentations.Major Accomplishments: • Noblis Technology Leadership Award - 2017 • Noblis Project Recognition Award (Excellence in Information Security) - 2016 • Submitted a proposal/idea for Noblis’ Annual Sponsored Research program that made it through the final round.

Rockville, Md, Us

• Maintained close collaboration with other groups (Privacy, NOC, IDS, OIG, HHS CSIRT) to enable rapid analysis and response to security incidents. • Performed incident handling of CAT1, CAT3, CAT4 and PII incidents. • Escalated unexplained, anomalous activity to next level for further investigation. • Track(RTIR) and managed incident life cycle to completion.

Bethesda, Md, Us

• Provided malware dissection and analysis (static and dynamic) in support of USCERT and DHS incident response groups. • Researched innovative tools to automate malware analysis and reverse engineering efforts as well as investigate alternatives to existing malware analysis tools to aid in analysis. • Performed network, host forensics and pcap analysis using a variety of automated GUI and command-line tools (i.e Remnux, VirusTotal, Cuckoo Sandbox, etc.) • Special projects included open source research on various malware tools and exploits. • Track ticket (Remedy) requests to resolution. • Created and submitted reports on a timely basis for local and international CSIRT groups and agencies.

North Syracuse, New York, Us

• Supported different projects for DHS ICE that included basic malware analysis, SOC and ST&E activities. • Conducted security assessments of the DHS ICE security architecture (databases, web systems and network). Analyzed the scan results for submission to upper management. • Provided creative approaches and techniques in an effort to complete projects on time such as creating query scripts when specific automated tools become unavailable. • Created reports that included recommendations focusing on user awareness and good security practices. • Trained junior team members on the ST&E process and procedures. • Performed continuous monitoring of the DHS network and systems.Major Accomplishments: • SRC Inc., Certificate of Appreciation - 2013 • SRC Inc., STAR Award (Technology) - 2011

Basking Ridge, Nj, Us

• Reviewed and assessed the network and systems architecture, design, and requirements from a security perspective to ensure errors and weaknesses are identified in the development lifecycle, or whenever changes are proposed, or problems are identified. • Performed continuous monitoring of the Verizon Internal Data Network, client systems and networks. • Responsible for scheduling and performing web, database and OS scans using Nessus, WebInspect and AppDetective. • Analyzed scans output and presented the findings in a detailed report. • Coordinated the remediation efforts with system owners for closure of findings.

Falls Church, Virginia, Us

• Assessed compliance using security technical implementation guidance (STIGs). • Collaborated with different levels of management to bring projects to completion. • Provided technical and program support for DHS ST&E activities on Windows/Unix based OS, application servers and routing devices. • Trained the junior team members on the different vulnerability tools used by the Agency. • Proposed alternatives to existing ST&E tools (Nessus, DISA Gold Disk) to aid in the continuous monitoring and vulnerability management of the Federal Agency's systems.Major Accomplishments: • DHS I&A Certificate of Appreciation – 2009

• Provided support for FBI C&A (NIST and DCID 6/3) activities that included running vulnerability tools, reporting the findings to upper management, developing mitigation strategies and working with administrators to close discovered vulnerabilities. • Prepared test plans. • Performed vulnerability assessments using commercial and freeware tools (i.e. Nessus, AppDetective and WebInspect). • Trained the junior team members on the different vulnerability tools used by the Agency.Major Accomplishments: • FBI I&A Certificate of Appreciation – 2004

Armonk, New York, Ny, Us

• Worked on various projects performing ST&E as part of C&A engagement activities for IBM clients that included financial, military and DC agencies. • Assessed the posture of Government and commercial clients' security architectures and assisted in identification of security gaps. • Provided policy and procedure reviews, security requirements analysis (e.g. NIST, DITSCAP), vulnerability assessments, testing, data validation and security architecture reviews.

Us

• Delivered incident response capabilities to a variety of government and commercial clients that included incident response, network forensics, system administration and cyber threat mitigation. • Served as a first line of defense identifying and responding to security threats. • Performed efficient monitoring of IDS sensors and firewalls logs • Tracked trouble tickets to ensure timely resolution of network traffic issues. • Performed basic security administration duties for devices that included Entrust PKI, RSA SecurID and firewalls.

Bachelor'S Degree, Chemical Engineering

Networking And Data Communications

Data Analytics