Sean N. Email & Phone Number

Bucuresti, Romania, Ro

- Manages Cyber Intelligence Fusion Cell, with operations in Europe and North America- Develops operational processes and mentors junior analysts, works with process improvement among other operational teams- Delivers tailored intelligence presentations to prospective and current customers and other internal stakeholders- Produces intelligence assessments, requests-for-information, and other specialized research and analytical products fused from sources on the dark web, open source, internal tooling, and intelligence feeds- Drives intelligence and MDR content creation for the Bitdefender blog- Performs quality assurance of all technical reporting from MDR operational teams

Bucuresti, Romania, Ro

- Daily triage and investigation of intelligence-related alerts: typosquatting, credential leaks, exposed code, etc.- Develops individualized threat models for companies, develops threat intelligence requirements specific to customer environment and industry- Responds to and researches requests-for-information from SOC or external customers- Assists in incident response through intelligence-led hunting and research- Fosters process improvement and develops requirements; mentors other analysts- Delivers intelligence insights and discusses process for briefings with prospective and existing customers, as well as internal stakeholders- Assists in MDR- or intelligence-related content creation for Bitdefender's Business Insights blog

- Responds to client requests for intelligence (RFI), scopes intelligence requirements, sets delivery dates, and engages clients for feedback; triages RFIs for assignment to team analysts, QAs final products, performs collection management- Manages production of Photon intelligence products: client intelligence updates, weekly intelligence summaries, external research or marketing content, and RFIs; engages with sales, customer, product, and marketing teams to assess and deliver intelligence products- Delivers and QAs responses to media and security researchers, participates on calls with clients and internal stakeholders to provide intelligence perspective- Manages up to 10 intelligence analysts on two continents

- Hosts biweekly ShadowTalk podcast about current events in cybersecurity and intelligence- Produces weekly blogs to support current product offerings, research into current events, and other intelligence topics- Produces and QAs intelligence updates for Searchlight portal- Participates in incident response for client intelligence needs- Works closely with product and marketing teams to produce intelligence-related content, including webinars, media outreach and public relations, and customer-driven content

San Antonio, Texas, Us

Responds to alerts for phishing and other malicious attempts against Rackspace and its employees, reviews peer work. Documents, improves, and facilitates process improvement for both customer and Rackspace needs. Conducts analysis of suspicious websites and attachments or other artifacts, initiates network and message blocking, conducts remediation of malicious artifacts. Participates in incident reviews after major security events for the company and with customers. Delivers tabletop discussions and other education opportunities for other Rackspace teams while also mentoring junior analysts.

San Antonio, Texas, Us

Identifies and assesses threats to Rackspace's network and data, monitors its network for malicious activity, investigates intrusions and other relevant events, and has a sophisticated and detailed understanding of the evolving threat landscape. Provides significant contributions assessing and disseminating threats related to the enterprise with current vulnerabilities by updating existing threat information.-Keeps up-to-date knowledge of new and emerging threats which affect Rackspace information assets through OSINT and documents these findings in briefings which are presented to stakeholders-Reviews and drafts threat intelligence products, provides feedback, or works within a team to produce threat intelligence-Documents threat intelligence research and observations, identifies mitigating/compensating controls, advises best practices or use of countermeasures-Conducts analysis using a variety of tools and data sets to identify indicators of malicious activity on the network.-Respond to computer security incidents and conduct threat analysis as directed. Provide accurate and priority driven analysis on cyber activity/threats.-Perform payload analysis of packets and detonate malware to assist with threat research.-Collaborates with incident response analysts to provide indications and warnings, and contributes to predictive analysis of malicious activity.-Participate in root cause analysis or lessons learned sessions-Write technical articles for knowledge sharing, or responds to requests for information from customers and internal teams-Monitor threat actors and related threat objects for items of interest to Rackspace and keep information up to date.-Supports SOC, incident management, compliance, and penetration testing teams with security initiatives -Researches threat actors and malware campaigns to catalog indicators of attack or compromise

San Antonio, Texas, Us

Supports customer operations in deterring, identifying, monitoring, investigating, and analyzing computer network intrusions. Hunts for suspicious or anomalous activity using indicators of compromise from various intelligence feeds and toolsets. Active participant during incident response, investigation, and resolution of security incidents through searches for indicators of attack and compromise. Maintains strong awareness of the current threat landscape. Supports incident response reporting and policy updates as needed.Day to day responsibilities: Uses various tools for potential threat identification and research. Provides incident remediation and prevention documentation. Documents, conforms to, and changes processes related to security monitoring. Creates weekly, monthly, and special/ad-hoc intelligence reporting to customers. Analyzes threat environment specific to customer business vertical, and enriches intelligence products through open-source intelligence and other reporting. Working familiarity with industry standard endpoint monitoring tools, SIEM, intrusion detection system, and open-source intelligence workspaces and tools. Maintains logs of essential information from OSINT and custom feeds for campaign tracking, produces weekly intelligence summaries for internal customers, produces industry-or customer-specific threat landscape products, and develops or validates targeting information for network hunts in customer environments. Researches vulnerabilities or emerging campaigns to validate against current customer requirements and configurations.

Arlington, Virginia, Us

Senior HUMINT instructor for the Army Reserve, certified to instruct, evaluate, and facilitate the Basic HUMINT Course and Advanced Leadership Course. Took charge of student education and mentorship throughout multi-week platforms of instruction using small-group and lecture techniques to deliver training on interrogation, source operations, intelligence reporting, and other critical intelligence and soldier skills. Scheduled contract and military instructors for course needs, ensured continuity of logistics and courseware during and between courses for students and instructors, and documented student progress for graduation. Mentored and evaluated instructors for annual instructor certification requirements. Designed and improved ongoing training events for resident courses as well as soldier skill development focused on intelligence and other real-world scenarios. Authored and recommended changes to relevant courseware, participated in ongoing quality improvement based on feedback from instructor cadre and students.

Arlington, Virginia, Us

Led two operational SIGINT teams as mission supervisor in support of joint strategic intelligence operations. Ensured mission readiness for up to 15 assigned linguists and analysts from joint services and allied forces, cross-cued collection and reporting through multiple stations around the globe, deconflicted collection assets, and watched for indications or warnings of hostilities to U.S. personnel or allied forces. Served as main contact for critical events, delivered daily mission briefings to watch personnel, and conducted frequent briefings for visiting dignitaries and senior officers. Quality controller of first-line intelligence reporting, transcription, and analysis for dissemination throughout the intelligence community. Maintained high degree of language skills and operational area knowledge. Worked to improve collection through exercises with other teams, as well as soliciting feedback from stakeholders.

Arlington, Virginia, Us

Uniquely qualified as one of only two SIGINT/electronic warfare flight instructors in EUCOM for the EH-60/UH-60 airframe. Ensured assigned linguists are trained on electronic warfare systems, tactical intelligence operations, as well as standard aircrew tasks. Maintained detailed flight training records of the company's assigned aircrew personnel and enforced Army safety and flight standards during day, night, and NVG operations. Maintained high degree of language proficiency which resulted in the 1st Infantry Division achieving 3rd place at the Worldwide Language Olympics out of over 50 teams. Served often as the battalion's sole armorer, responsible for maintenance, inventory, and security of assigned weapons, night vision equipment, and personally-owned firearms.

Arlington, Virginia, Us

Deployed to support Task Force Gunfighter S-2, consisting of 1st Infantry Division Apache, Kiowa, and Blackhawk detachments, 12th Aviation Chinook detachment, United Arab Emirates Apache company, and Ukrainian Mi-8 Hip company. Published daily intelligence summaries, and assisted NCOIC and OIC in building daily battle update briefs for the task force commander. Conducted pre- and post-mission aircrew briefs for reconnaissance and border flight missions. Maintained imagery inventories for maps, overlays, and other specialized imagery. Assisted with security clearance investigations by initiating and completing investigations and renewals; as well as downed aircrew/ISOPREP information. Selected by task force commander to serve as liaision to attached Ukrainian personnel, which included daily contact to Ukrainian task force commander, senior officers, and staff.

Arlington, Virginia, Us

Various training posts for initial entry to the Army: basic training, language school, advanced individual training, and follow-on certifications.

San Antonio, Texas, Us

Investigates, evaluates, negotiates and adjusts low to moderately complex auto claims presented by or against USAA insureds to confirm coverage, determine legal liability and equitably settle/defend in compliance with all state regulatory requirements. Works under direct supervision, perform routine work assignments and problem resolution. Provides auto/casualty claims service via multiple channels to members and third-party customers. Acquires and applies basic knowledge of P&C insurance industry products, services, and processes to include P&C insurance policy contracts and coverages and the USAA claim handling process and procedures. Seeks guidance from team members to resolve issues and to identify appropriate issues for escalation. Contributes to business goals and performance metrics, and effectively uses tools & technology. Expertise in providing claims service to members and customers regarding claims involving vehicular total loss. Documents loss, addresses immediate questions regarding claims process, reviews and analyzes the vehicle settlement value. Analyzes information obtained to establish compliance for regulatory requirements and settlement value within established settlement authority limits and negotiates any excessive storage charges. Provides coordination with internal functions to include appraisals, SIU, Region Counsel, Subrogation and Salvage, vendors, and other internal business partners in order to facilitate claims resolution. Issues payments to financial service providers and customers to conclude claims. Handles between 30-50 calls per day regarding claims status while working in a team environment, surges for catastrophe operations. Contributes to enterprise business goals through enterprise referrals and relationship building, as well as integrated solutions to USAA members. Daily work with LexisNexus, ISO, repair estimates, vehicle appraisals, state vehicle salvage processes, and state VIN information databases.

San Antonio, Tx, Us

Ensures physical security of facilities and employees, while complying with company standards and procedures for safety and security. Serves in customer contact role for visitors and guests through visitor badge issue, information point of contact, and security advisor. Trained for disaster and emergency readiness, to include basic first aid and CPR techniques. Patrols facility and responds to alerts. Working familiarity with enterprise security surveillance and access control software.

Bachelor'S Degree, Cybersecurity And Information Assurance

Intelligence Operations

Marketing

Gsec Certification, Security Fundamentals Boot Camp

Gcti Certification - Cybersecurity Threat Intelligence

Basic Osint Course

Human Intelligence Collector Basic Course

Cryptologic Linguist And Electronic Warfare Operator Training

Georgian Language And Cultural Studies

Russian Language And Cultural Studies

Small Group Instructor Training Course (Sgitc)

Army Basic Instructor Course

Advanced Leadership Course

Education record

Physical Security Basic Course