Lead incident response, run weekly meetings with stakeholders and delegating tasks.Develop workflows, procedures and processes for incident handling and escalation.Conduct advanced network and host based log analyses.Work within a number of environments such as AWS, Azure, and GPC.Investigate intrusions, root causes and validate mitigation controls.Provide solution recommendations to senior management based on security gaps, threats or vulnerabilities.Drive the construction of detection content for new or emerging threats.Ensure excellence through training and mentoring staff.

Identify tactics, techniques and procedures used by cyber actors and correlate activity to determine level of threat.Leverage intelligence and operational data, information and processes to identify threats, improve security, and reduce the enterprise’s exposure of vulnerabilities.Hunt for adversary activity on DoD networks via log, network, and packet analysis.Discover Indicators of Compromise and correlate activity to determine scope and extent of possible compromise. Perform threat informed analysis by leveraging serialized reporting, intelligence product sharing, OSINT, and open source vulnerability information to ensure prioritized plans are developed.

DoD Cyber threat intelligence, detection, investigation and response.

Provide support of Windows file, print and database servers including setup and administration of file shares and manage, support and troubleshoot file and folder permissions.Setup, maintain, and support Veritas DLO backups on end user laptops and troubleshoot backup issues as they occur.Perform email account and mail enabled security group administration on a daily basis.Administer user access and permissions to databases residing on organizational servers. Manage numerous virtual Windows server hosts on VMWare.Support Microsoft Exchange server 2013 and 2016.Manage Microsoft 2016: AD, Exchange, Lync and SharePoint servers.Develop, administer and troubleshoot agency SharePoint 2010 and 2013 sites.Spearhead initiative to improve existing ticketing and inventory system.Provide server documentation and how-to instructional guides as necessary.Define and document best practices and support procedures.

Supported a large domain environment with over 40k users at Social Security Administration.Handled incidents related to network, VPN, McAfee ePO, ESSO, and COTS software.Resolved high priority network incidents for top executives and directors.Traced and diagnose issues with layer 2 and 3 switches, routers, and firewall appliance.Managed 2016: AD, Exchange, Lync and SharePoint servers.Maintained security and compliance of devices on the network per NIST SP 800-53.

Install, configure, troubleshoot, and resolve incidents related to network, hardware, COTS software, SharePoint, and VoIP systems.Manage active directory; create user accounts and security policies that would meet the Access Control configurations per NIST SP 800-53.Adhere to change management and chain of custody protocols.Provided server documentation and how-to instructional guides as necessary to staff.Reviewed and stored the systems, security, and application event logs from serversMentor and cross train team members on existing and new technologies.Resolve incidents and fulfill requests within SLA for over 2,500 users.Support and secure operations by maintaining McAfee HIDS and Endpoint Check Point DLP software.Analyze, remove malware, viruses and remediate vulnerabilities, security violations, and incidents within designated time frames.Collaborate with SMEs to troubleshoot and resolve incidents.Configured Android and iOS devices with email and cloud applications.Comply with HHS Enterprise Performance Life Cycle ensuring most optimal utilization of technology.

Provide managed IT services for business in the Baltimore area.Oversaw projects such as server upgrades and disaster recovery project plans.

Supervised interns, temps and new staff assuring assigned tasks are completed properly.Utilized ITIL best practices to reduce costs, improve productivity and user satisfaction.Coded PowerShell scripts to gather error logs and detect malicious processes on hosts.Aided in product purchasing and planning by analyzing reports and trends.Lead projects including updating all employee data and organization asset tracking.Worked with numerous vendors on revolving around cloud-Exchange services, data encryption, and internet filtering.Administered Windows Server 2012 DC, DNS, DHCP, VPN, Novell iManager, and Shoretel VOIP.Oversaw BlackBerry and iPhone Mobile devices via AirWatch MDM.Used Active Directory to push scripts, install software and prohibit software.Documented best practices including but not limited to Novell iManager, Encryption services, Windows Sysprep, and reimage new workstations.Innovated processes for workstation upgrades utilizing Microsoft SCCM and scripts.

Optimized network by changing to a smaller net mask and using switches with VLANs.Established security policies with antivirus and routine changing of passwords via GPOs.Provided on call 24/7 for support.Reduced utility bill over $100 a month by reprogramming lighting and HVAC system.

Assisted with load balancing tests on NetScalers and WanScalers.Created virtualization environments with Citrix EdgeSight for load testing.Published software packages to XenApp/Presentation Server.Installed and configured XenApp servers.Administered Access Controls using DHCP and Active Directory.Designed charts and maps of the server Infrastructure. Headed a project to Inventory and retire servers and equipment.Managed Operating System images using XenServer 5 and VMWare Infrastructure.

Migrated Windows 2000 to Windows Server 2003.Deployed AD DNS and DHCP in Windows Server 2003 environmentAdded WINS on network to limit network traffic.Coordinated effort to develop and improve customer experience tracking.Redesigned the company’s website using Swish, Dreamweaver, and Photoshop.Attained digitization of document transactions where possible.Created TomCat Web Host running on Linux for the company’s website.

Oversaw our team of technicians’ day to day assignments.Coordinated team shift schedules from day to day and for new projects.Performed Active Directory restructuring and group policy changes.Maintained client networks with heterogeneous environments.