Conduct advanced threat intelligence and actor profiling using Anomali and Mandiant FireEye, analyzing TTPs and IOCs to enhance organizational security. Lead SOC operations, responding to security incidents and performing cyber triage to contain and remediate threats effectively. Utilize Splunk Enterprise Security for proactive threat detection and investigation, leveraging SPL for deep-dive data analysis. Develop comprehensive After-Action Reports (AARs) and SPOT Reports detailing timelines and impact of high-priority cyber incidents. Conduct vulnerability assessments using Tenable and Qualys, identifying CVEs and implementing remediation strategies. Monitor and investigate mobile device security using Zimperium, ensuring endpoint protection and compliance. Collaborate with cross-functional teams to address security alerts, enhance cloud security posture, and improve threat detection workflows.

Spearheaded comprehensive security operations and incident management for a financial federal agency:• Led daily security operations and threat analysis for the Consumer Financial Protection Bureau, significantly enhancing network resilience against cyber threats.• Directed comprehensive vulnerability assessments, collaborating closely with System Owners for timely remediation and reduced exposures.• Authored detailed After-Action Reports (AAR) and SPOT Reports, using strong communication skills to provide clear, actionable insights and strategic directions.• Skillfully utilized Splunk Enterprise Security, CrowdStrike, and Anomali for advanced threat detection, response, and threat actor profiling, demonstrating strong analytical skills in streamlining incident management processes.• Managed cloud security within Amazon Web Services (AWS) environment and Microsoft Office 365 Defender, ensuring robust security measures and compliance.• Actively responded to and addressed security incidents reported to the Security Operations Center (SOC), enhancing detection, analysis, and response capabilities to mitigate threats effectively.• Implemented and monitored mobile and remote operations cybersecurity measures, adapting security strategies to evolving cyber threats and ensuring comprehensive protection.• Developed and led training sessions for new analysts in the SOC, fostering a skilled and knowledgeable team adept at responding to complex security incidents.

Supported IT infrastructure and cloud integration projects for federal judiciary operations:• Integrated VMware products with Microsoft Azure Active Directory, optimizing system efficiency and user access management through strategic leadership and technical proficiency.• Supported cloud application deployments and maintained rigorous system security protocols, demonstrating a commitment to high security and operational standards.• Assisted in the troubleshooting and resolution of network issues, enhancing system reliability and user satisfaction.• Provided technical support and training to end-users, improving their understanding and efficient use of IT resources.

Enhanced data governance and compliance for medical education standards:• Implemented data governance standards using Collibra, enhancing the integrity and accessibility of information across the organization.• Developed and communicated policies and standards that strengthened enterprise data services and compliance with regulatory requirements.• Participated in the analysis and mapping of data flows, contributing to better data management and utilization.• Assisted in preparing reports and presentations for senior management, detailing governance processes and improvements.