Cyber Physical Security:Team LeadSOC Assessments and Uplift:Maturity assessments of Security programs, Institutional uplift and transformations.Threat Hunting & Program Development:Development of Threat Hunting programs.Threat Intelligence Analysis:Analysis and operationalization of finished intelligence products. Application of intelligence into Threat Hunting efforts.Election Security and Protection:Technical and Strategic Lead for protection efforts.Mandiant Academy:Instructor and ThreatSpace Facilitator

ThruntCon is a unique collaborative of cybersecurity industry leaders who gather annually for a private colloquium to discuss all manner of topics and exchange ideas.

• Emergency \ Incident Response AnalystAll aspects of process from scoping to response, to report and follow up. Michael has participated or led several Incident Response engagements with clients across multiple verticals.• Digital Forensics InvestigatorMichael has engaged in network and host based forensics investigations during active incidents, as well as matters pertaining to client employee misconduct. • Threat Intelligence AnalystPassionate about Threat Intelligence, Michael strives to approach his work through that lens. Whether developing Incident Response plans and playbooks, or documenting and analyzing an incident. He helps to educate the client on how to become pro-active in their defensive posture, and maximize open source intelligence to best determine the Tactics Techniques and Procedures which a potential or actual adversary may present.• Security EducatorMichael has developed custom training materials and multi-day classes for clients to help boot strap client employees from “IT Workers” to DFIR analysts.

Monitor open source information feeds for cyber intelligence on emerging threatsCollect, research and analyze cyber threat informationAssess threat risk and develop a contextual threat blueprint on the likelihood and impact to company networks and infrastructure Aggregate and correlate cyber threat information to known vulnerabilities and intrusion activityPrepare reports and communicate results on immediate threats and associated risksContribute threat analysis and risk exposure to facilitate effective incident responseDevelop a portfolio of historical threat activity, trends and common attack vectors to predict and prevent future threats Establish a threat modeling methodology to identify, classify, prioritize and report on enterprise threats using a structured approachProvide research for next generation traditional and non-traditional cyber threat methods, techniques and tactics specific to evolving IT infrastructuresMonitor social media for relevant data and confidential informationMaintain familiarity with multiple operating systems in order to analyze malware static and dynamic behavior

* Deployed WebSense V10000 appliances to facilitate web filtering for the departments’ 23 thousand users. Implementation included WCCP setup and WebSense Hybrid Cloud Filtering.* Create and update Information Technology departmental policies with regards to network security and HIPAA regulations.* Management of departmental AirWatch Mobile Device Manager* Monitor network for vulnerabilities through the regular use of McAfee Vulnerability Scanner and suggestion and implementation of remediation plans.

* Completed replacement of departments MARS100 SIEM product with full suite of Nitro Security’s enterprise SIEM and security products.* Support and maintenance of Motorola AirDefense enterprise wide wireless security system, including patching and support of the central network appliance and multiple access point/sensors located in various department buildings. Responsible for the planning and deployment of new wireless sensors as needed, and in the mitigation and investigation of any wireless security events contrary to established departmental policy. * Maintain WebSense Triton Web 2.0 security suite, also the creation and altering of the necessary Microsoft Active Directory objects to integrate with the WebSense system to facilitate access control groups and exceptions for web surfing.* Create and update Information Technology departmental policies with regards to network security and HIPAA regulations.* Monitor network for vulnerabilities through the regular use of McAfee Foundstone Vulnerability Scanner and LanGuard GFI Scanner. *Assist department lead in the forensic examination of computers, memory devices, involved in security incidents using tools such as the Forensics Tool Kit, Encase, and HELIX .

* Provide phone and e-mail support for the departments 3200 users.* Maintenance and administration of Oracle 9i based correspondence system, including system upgrades to the client software using Oracle Enterprise Manager.*Assist in department wide network deployment and administration of Microsoft Active Directory.* Domino Server 6.5 user and client administration (client is Lotus Notes 6.5).* Maintain and update department Symantec Ghost server and images. * Created Active Directory test environment for GPO creation and editing, prior to production network release. * Provide Server and Desktop hardware and software upgrading and repairs.

* Responsible for the triaging and servicing of all customers Apple mobile devices which include iPod, iPad, and iPhone.* Provide training and instruction to customers in group and one-to-one scenarios on all iOS versions and platforms, as well as OSX and the iLife suite of products.

* Assist Director of IT with daily network administration tasks, and hardware and software procurement. * Design and implementation of Exchange Server 2000, As well as administration and maintenance.* Active Directory and Group Policy administration, including design and implementation of Group Policy controls via the use of Script Logic software.* User support for hardware/software issues.* Responsible for all Network printers and services.

* Designed Exchange 2000 Enterprise Server w/SP3 (clustered) with a front end server configured for OWA pre-processing and implemented E-Safe for Virus scanning and security for approx. 250 users in a 24/7 capacity. * Designed and implemented an Active Directory Infrastructure for the Company Including Group Policy Objects and Script Logic for automated drive mapping and software deployment.* Configured and instituted back-up for all Windows 2000 servers Using CommVault Galaxy.

* Designed and implemented a system migration from NetWare 5.1 to Windows 2000 including 10 servers, Microsoft Internet Security and Acceleration Server 2000, and Microsoft Remote Access Server.* Administration and maintenance of Infinium Advantage Microsoft SQL 7.0 payroll database and client software. * Day-to-day hardware maintenance of all servers. Including either ordering or building new servers as need arises.* Creation of new users and general user administration.* Selection of all computer hardware for City use.* Network administrator for remote locations such as Retail Skills Center, and 3 recreation centers in the City.* Application support for 200 users.* Provide technical assistance to Police and Fire IT staff.* Responsible for the upgrade, repair, building, and installation of user PC's.* Maintain network wiring in server room.* Maintain and setup printing services for network.* Digital video editing for City promotional videos used during presentations.* Cleared by FBI and New Jersey State Police for work in Elizabeth Police Department in and near areas with NCIC access.