Key Accomplishments:-Led a groundbreaking physical security assessment for a high-profile political campaign, conducting a successful penetration test of their headquarters. This involved developing effective pretext personas through in-depth OSINT, creating a custom RFID skimmer to enable access, and ultimately gaining access to implant malware.- Developed an AI-powered model for process optimization that has significantly improved lead qualification analysis and routing efficiency. This solution was praised by Mandiant leadership and is being integrated as the de facto standard across the organization.- Played a key role in securing a $1.4M, multi-year deal with a logistics company by showcasing the value of Mandiant's consulting services. This led to expanded engagements in penetration testing, red teaming, and strategic services.- Successfully led a red team exercise for a Fortune 500 hospitality and leisure company, achieving a successful penetration test where four previous firms had failed. This resulted in high praise from the client's CISO and generated significant follow-on work.Core Responsibilities:- Manage the full lifecycle of cybersecurity engagements, including scoping, planning, execution, and reporting.- Provide subject matter expertise in incident response, forensics, penetration testing, and red teaming.- Mentor and develop less experienced staff, providing guidance and support to enhance their technical and consulting skills.- Identify, market, and develop new business opportunities, contributing to significant revenue growth.- Articulate Mandiant's capabilities in marketing discussions, proposal efforts, and capability briefings.- Develop comprehensive and accurate reports and presentations for both technical and executive audiences.- Utilize Mandiant technology to conduct large-scale investigations and examine host and network-based sources of evidence.-Improve Mandiant's business processes and incident response methodologies.

ResponsibilitiesTraining students in the USA and Europe on Advanced Windows Forensics to prepare them to take the CAWFE (Certified Advanced Windows Forensic Examiner) Certification. Topics include but are not limited to: Virtualization: Concepts, artifacts and practical usage. We explore the various terminology used to describe virtualization and its associated technologies. In this topic, we work through a command line approach to virtualize a suspect forensic image and discuss how to bypass user logon passwords. Partitioning schemes: Understanding MBR and GPT partitioning schemes. We explore these common schemes and parse some of the structures at the hex level. Understanding some of these structures enables the examiner in linking devices to Windows artifacts. File Systems: Overview of the common file-systems with a focus on NTFS and its critical use of metadata files and understanding of their structures. Security Features and Encryption common to the Windows Operating System. Registry: Concepts, structures and artifacts common to the Windows Operating System covered including; SOFTWARE, SAM, SYSTEM, NTUSER.dat etc USRCLASSArtifacts & More: reviewing the concepts, identification and analysis of many Windows artifacts, such as how to determine application usage, user interactions, event logs, volume shadow copies etc. We also cover some of Microsoft Windows defaults in order to assist an examiner in determining user knowledge when things change from the norm. RAM and virtual memory management concepts. Using command line tools to analyze a RAM image and determine application usage and user interaction.

Cyber Forensics, Memory Analysis, Computer Forensic Investigations, Mobile Phone Forensics, Digital Investigation, Forensic Analysis, Sleuth Kit, Computer Forensics, Digital Forensics, EnCase Forensic, Forensic Toolkit, Oxygen, Cisco Networks, Apple, Axiom, FTK, Training Instruction, Developing Training Programs, Teaching, Instructing, Technical Training, PowerShell, Windows Network, Domain Controllers, Terminal Services, Security Configuration, Group Policy Objects (GPO), Wireless LAN, Enterprise Networks, VPN, NAT, Firewalls, Networking, LAN, Documentation, VoIP Telephony, Microsoft Office, WSUS, VSS, OneDrive, Exchange Administration, Data Recovery, Disaster Recovery, Incident Command System (ICS), Incident Management, Incident Investigations, Incident Response, Ciphers, IPsec, Data Security, User Authentication, SHA-1, Cryptographic Algorithms, Cryptography, Decryption, Encryption Algorithms, Data Encryption, Encryption, Android Phones, Smartphones, iPhone Forensics, Oxygen Forensic Suite, Cellebrite, Imaging Techniques, Analysis, Covert Investigations, Forensic Investigations, Internal Affairs Investigations, Police Investigations, Internal Investigations, Criminal Investigations, Android Security, Cybercrime, Malware Analysis, Trend Micro, Antivirus, Anti Malware, Phishing, Windows Support, Windows Server, Laboratory Operations, NAS Management, Synology, Tableau, Wiring, Router, Switching, Cisco Command Line Interface, Linux Command Line, Windows Batch, Batch Files, Shell Commands, Shell Scripting, Windows Command Line, Network Security, Cybersecurity, Information Assurance, IT security, IT Service Desk, Helpdesk, Users Support, Technical Support, Customer Support, Trouble Ticketing, Networking Tools, Networking, Server Installations, System Management, IT Administration, Windows Administration, Database Administration, Linux Administration, Network Administration, Server Administration, System Admin, Macros, Python, Bash Scripting, Grep, Regexp, OSForensics

-Investigating suspected instances of fraud, abuse, data leakage, computer viruses, malicious code, and network penetration of Deutsche Bank's information systems.-Evidence recovery, examination and analysis of data from computers and other electronic storage devices within cyber/physical systems. -Providing cyber security awareness and training. Participating in technical meetings and working groups to address issues related to computer security, protection against malware, and other vulnerabilities.- Independently planning and executing forensic support for complex investigations, presenting clear and concise findings to a nontechnical audience- Ability to work independently or with a team during large scale forensic investigations- Preserve network and host-based digital evidence in an industry accepted forensically sound manner- Perform host-based digital forensics on Microsoft windows based systems and other operating systems as necessary- Forensic processing of digital evidence including desktops, laptops, storage media and mobile devices- Responsible for conducting a forensic sound collection and analysis of the various tools in support of security, HR / ER, Legal, and Compliance as it relates to a large international financial organization- Assist in the development and delivery of malware security awareness products and briefings- Provide training and guidance for new hires and ensure all team members follow consistent processes- Mentoring junior colleagues- Responsible for managing colocated junior forensic investigators of a global team that monitor and resolve internal security events- Work with global teams to drive efficiencies and provide feedback- Secure digital evidence- Provision of first line support to the evidence review platform- Liaising with external stakeholders and external third party suppliers- Assist in the creation of processes / procedures, technical documentation, as well as completionof project tasks

• POST Certified Sworn Law Enforcement Officer• Experienced in Complex Investigative Techniques, Search Warrant Execution, Arrest Powers, Pen Registry, and Surveillance.• Conducting the forensic analysis of computer systems and other forms of digital evidence, with the goal of preserving, identifying, extracting, interpreting, and documenting the evidence found.• Using experience and knowledge of a wide variety of advanced computer technologies and theories to conduct analysis of submitted evidence.• In data recovery cases, determining the most appropriate method of protecting original evidence and recovering deleted, erased, hidden and encrypted data.• Preparing cases and to complete detailed computer offense and incident reports to testify as an expert in court.• Conducting proactive online Investigations involving sexual predators, computer fraud and identity theft• Acting as the agency liaison to ICAC (Internet Crimes Against Children) Association, NWCCC (National White Collar Crime Center), ICCC (Internet Crime Complaint Center) and United States Secret Service - Electronic Crimes Task Force.• Making public presentations regarding Internet safety.

Responsibilities• Active Directory Administration – managing Group Policy and objects within AD.• Microsoft Exchange Recovery and Administration – Storage, Implementation, Legal Holds.• Cisco (CLI, CNA, VPN & Cisco IOS), Sonicwall & Barracuda Network Administration.• IT Assets Deployment & Administration – Acronis Imaging, Asset Tracking, Secure Disposal.• PBX & IP Telephony Deployment & Administration – Intertel, Mitel & Panasonic systems.• Inter-department and End User communications, support and training.• Mobile device expertise and support & repair (Apple iOS, Android & Tablets )• Microsoft and VMware virtualization training and expertise.• Responsible for resolving and documenting over 1100 issues annually

• Managed 20 direct reports: 11 agents and 9 support staff members.• Successfully managed over 500 real estate transactions from contract to closing annually.• Collaborated to develop, program, & train users on new Intranet database system.• Used the web database I collaborated to develop to document each call or email to each contract.• Maximized effectiveness by creating custom xml & pdf forms to speed contract input times.

• Wrote a bi-weekly column on news and events.• Worked as a team to cover a wide variety of interests & topics• Gained vast journalism and editorial techniques to enhance prose.• Enhanced efficient communication skills using Associated Press style format.

• Designed and implemented corporate web presence• Managed and maintained all computer systems, upgrades, and repairs.• Coordinated and scheduled computer network implementation in commercial buildings.• Responsible for training of computer and software use, and technical issue resolution.