Michael Gruning Email & Phone Number

Frisco, Tx, Us

Frisco, Tx, Us

Led and supervised network security of eight major enterprise projects impacting five SonyCompanies utilizing Amazon AWS, Google Cloud, and Microsoft Azure. Ensured security 20+ teammembers optimally performed cyber security and vulnerabilities security protections.▪ Saved Sony Corp over 10+ million dollars in yearly licensing costs by enhancing security posturewhile making security tools easier to manage.▪ Modernized four corporate global data centers by migrating Sony’s Global Wide Area Network(WAN) infrastructure to a Software Defined WAN (SDWAN). Improved global performance andcommunications by a factor of 35%.▪ Led and managed major RFP with corporate directors and security experts to replace Sony’s globalendpoint detection and response (EDR) security vendor from McAfee to Windows Defender.

Designed, integrated, and tested complex cloud-based intelligence network systems to interfacewith cloud data analytics. This included network design and software development.▪ Led and managed NSA’s elite Red Team Advanced Security Research (ASR) Branch. Managedover 100+ team members covering five networking, research, and development teams.Discovered multiple software, network, and system vulnerabilities.▪ Improved cloud communication flow and process efficiency by 25% by streamlining networkarchitectures.▪ Led 12 separate software security projects resulting in the discovery of hundreds of exploitvulnerabilities. Each project was streamlined to quickly and thoroughly discover the deploymentof exploits and deployment of patching.▪ Led research and development teams to create tactics, techniques, and procedures to discovervulnerabilities at a global enterprise scale and defeat intrusions.▪ Led the integration of Red Team with network operations teams to strategize vulnerabilityassessment operations and to streamline security tools efficiencies.▪ Improved network operations performance by 15% by creating more efficient operations plans.▪ Initiated and led daily and weekly meetings with the senior operations director and

• Co-managed a team that researched data exploitation tactics, techniques, and procedures (TTP’s) and developed other passive monitoring techniques and/or counter measures. • Designing and developing solutions for passively monitoring networks. Analysis for data exploitation techniques, and analyzing the network data for anomalous behavior. This allowed for easier detection of anomalous activity to help find and resolve potential security issues • Worked with the Database Administrators (DBA) and developers to build custom code projects. Providing code, design strategies, and project guidance. • Translated technical specifications for specialized non technical analysts to develop targeting techniques and translated analyst target information into cybersecurity targeting information for developers and engineers.

• Built a Sensitive Compartmented Information Facility (SCIF) from the ground up with multiple networks and was accredited for use by the government in a 3 month period. A process which usually takes 2-3 years. • Planned and organized systems risk assessments for implementation of disaster recovery and continuity planning for enterprise systems to allow for zero downtime. • Integration of SI International network infrastructure with Bridge Technology network infrastructure after SI International purchased Bridge Technology. This was accomplished in a short period of 2 weeks.

Arlington, Virginia, Us

Worked on a variety of ELINT and SIGINT based systems. Final duty station was as the NCOIC of the (National Intelligence Support Team) N.I.S.T. support office, which provided engineering of systems for NSOC and the N.I.S.T. as well as continued maintenance and support.