Global incident response case management and handling, through resourcing and crisis communications with customers requiring reactive investigative support. Supporting both proactive and reactive support for Microsoft customers, with resilient and improved security posture outcome focus, product enhancement and consumption, and contracting level expertise. Formally providing team development through service offering development, retainer and contracting development and go to market production of new services, and internal readiness and training programs for members of DART, customer engineering partner teams, and customer success account management teams, globally. Harnessed and leveraged Threat Intelligence and nation state threat actor assessments and data, through both formal deliverables and customer specific notifications and education. Performing in regular thought leadership and presentation events, driving lessons learned, best practices, and new innovative concepts and frameworks from our team's experience to audiences of conferences such as RSA, Blackhat, EBCs, and other local or virtual events. *Developed and formalized the Security Crisis and Response Exercise- developed, delivered, scaled, trained facilitators, and currently maintaining the effectiveness of this proactive incident response workshop. SCRE offers a twist on traditional tabletop experiences through harnessing data from real world incidents investigated by DART, focusing on adversarial attack path through examination of current techniques and tactics. Cushioned with MSFT best practices, understand our internal security reference architectures such as IAM, Zero Trust, and Security Operations. *Infrastructure Support and Hunting- providing reactive-based support through DART investigations. Assisting customers through their tool deployment strategy. Additionally, through proactive services, providing support during services focused on proactive based threat hunting and analysis.

The Solutions Research and Development team focuses on the development and delivery of deeply researched enterprise security program frameworks to tailor to organizations of all sizes and maturities, for benchmarking and improvement upon their current security posture. These frameworks provide the maturity evaluation, technology solutions, staffing requirements, and the processes the bind the enterprise's effectiveness and efficiency while providing operational success.

Recently joined the Optiv Team as a Solutions Research Analyst Associate, training through Optiv's Associate Program. The program focuses on accelerating the growth of individuals' current talent and developing a broader range of skills.The Solutions Research and Development team focuses on the development and delivery of deeply researched enterprise security program frameworks to tailor to organizations of all sizes and maturities, for benchmarking and improvement upon their current security posture.My current program frameworks include Enterprise Incident Management (completed and published) and Application Security (in progress). These frameworks provide the maturity evaluation, technology solutions, staffing requirements, and the processes the bind the enterprise's effectiveness and efficiency while providing operational success.

As an information security analyst the primary focus was continuous monitoring and analysis of the network activity while developing policies, procedures, and guidelines for diagnosis and remediation of any identified security gaps. Additionally, any written policies/SOPs will be implemented in accordance of NIST 800-53 compliance requirements. Programs for implementation and management include: Security Awareness and Training program for end users and role-based positions in areas such as Developer training for secure coding concepts and Non-Disclosure training to cover legal and personnel expectations. Incident Response program which covers not only IR handling and reporting procedures but also annual training and exercises for all IR personnel vetted as first hand respondents for the agency. In addition to technical writing, employee awareness outreach, and program management, I participated within auditing processes for federal/state compliance while assuring separation of duties within the team. Auditing is a constant duty sometimes reliant on deadlined scheduled onsite and mandatory federal audits and sometimes under a risk assessment level where we individually measure compliance against recommended guidelines such as SANS's 20 Critical Security Controls. Currently a member of Idaho's chapter for Infragard and Boise's chapter for ISSA.

Customer Service Representative/ IT Support TechnicianProviding excellent customer support to both employees and customers of Idaho Department of Labor. Assisting in technical support on Helpdesk, alerting technicians of network and software malfunction, and answering main line phone calls for the State UI Claims Service.