• Conducted security tests for over 20 Fortune 500 commercial clients and federal clients. These security activities include network penetration tests, web application security assessments, red team engagements, mobile application security tests, phishing exercises, and security controls assessments. • Discovered zero-day exploits on internal and external systems, tested mission critical systems, and assisted in vulnerability remediation. • Designed and coded a database-driven resource tracking solution for the National Aeronautics and Space Agency (NASA). Manipulated data from security tools to identify vulnerabilities in public-facing systems resulting in reduced organizational risk exposure. Architected and developed automated scanning and tracking solution responsible for protecting over 6000 agency systems resulting in greater equipment visibility and vulnerability identification / remediation. • Coordinated and executed red team operations for commercial biomedical and critical infrastructure organizations. During operations successfully moved laterally through client networks to identify gaps in blue team detection capabilities while communicating with client leadership to ensure operational objectives were met.• Led exercise simulation team as element planner for the Cyber Storm national level exercise with the Cybersecurity and Infrastructure Security Agency (CISA), which saw participation from hundreds of organizations and thousands of participants globally. • Analyzed and reverse engineered mobile applications for security flaws. Coordinated with client CIOs and CISOs, as well as technical system owners throughout all cycles of security testing and response for penetration tests, zero-day discovery, exploit development, and remediation. • Evaluated security solution effectiveness, balancing operational requirements against security controls within a number of security frameworks such as FedRAMP, NIST 800-53, DoD 8500.2, and CIS.

-Office of Economic Adjustment-Provided security and Information Assurance services to the Office of Economic Adjustment (OEA) in support of two of their systems; OEA.gov and Economic Adjustment Data System (EADS). Supported the DIACAP C&A process for both systems by developing, reviewing, and finalizing system security documentation, security procedures, contingency plans, and incident response plans within the DoD 8500.2 implementation framework. Participated in CCB discussions to analyze and adjudicate system change requests from a security perspective. Provided support for day to day system security operations (e.g., log reviews, scanning, weakness mitigation recommendations).-HQ USAF Civil Engineering (A7C)-Provided Certification and Accreditation (C&A) support to the A7C mission for the USAF, reviewing and authoring accreditation package to obtain multiple system accreditations which is necessary for the development system to operate. Performed both automated SCAP and manual STIG testing during development of enterprise-wide application, including Red Hat Enterprise Linux (RHEL) 5/6, Oracle 11g, Apache 2.2, Web Policy, Java, Application Security and Development (ASD), and Security Readiness Review (SRR) checklists.

Developed custom Java code in an Oracle ERP integration project for a federal insurance agency that protects pension benefits. Analyzed project technical requirements and existing legacy systems. Assisted in architectural design. Documented and wrote design proposals and system diagrams. Developed and tested core project components. Managed multiple work streams and competing priorities in a fast paced environment. Communicated directly with clients and project management in regular meetings. Lead efforts to build team relationships.

Assessed security vulnerabilities on live systems. Managed team projects and presented to corporate officers. Developed Java code for billable client projects. Analyzed market competition and reviewed competitor capabilities. Communicated with multiple teams on concurrent projects.