Bryan Lee Email & Phone Number

United States

Remote, US

San Jose, California, US

San Jose, California, US

Santa Clara, California, US

Santa Clara, California, US

Moffett Field, California, US

• Lead a 24/7/365 team to perform Agency-wide, real time monitoring and detection for NASA averaging over 30,000 analyzed events per week and over 600 incident records per week
• Create a regimented and targeted training program for all real time monitoring and detection analysts
• Evaluate and recommend new technology solutions, such as IPS, IDS, firewalls, and other appliances, in order to better defend NASA data and assets in an automated fashion
• Interface with the customer and executive level management on a regular basis to provide updates as well as gather additional requirements or needs
• Generate multiple reports providing metrics for incident reporting and trends be distributed to the entire Agency or executive level customers
• Create and maintain documentation for the monitoring and detection team detailing all processes and procedures

Moffett Field, California, US

• Analyzed historical incidents and new reporting to explore trending activity and predict future actions affecting NASA
• Generated situational awareness and mitigation actions reports on an ad-hoc basis as new threats and vulnerabilities were discovered
• Tracked and monitored advanced persistent threats in an effort to relate incidents across the Agency into cohesive threat actor campaigns which helped transition the NASA SOC into a more proactive security organization
• Streamlined and documented internal processes to increase efficiency and productivity, as well as reduce confusion
• Developed new technology solutions such as heat mapping software for trend analysis and an internal wiki
• Recommended and implemented over 10,000 mitigation actions, resulting in Agency-wide saved costs for incident response

Moffett Field, California, US

• Dell Services Federal Government October 2011 – May 2013
• Implemented changes and recommendations on processing IT security incidents that improved impact assessment, mitigation, and investigative capabilities
• Streamlined, reviewed, and documented existing processes as well as created new processes to move the NASA SOC to a more dynamic and productive organization
• Developed and implemented new technology solutions, such as internal tool package management, an organizationally accessible logbook, and packet capture solutions
• Led a bi-weekly review of all rulesets used at the NASA SOC for review on effectiveness, false positive rates, and false negative rates
• Maintained and developed an operational virtual machine for all staff to utilize in day-to-day analysis activities, including system patching, tool development, existing tool maintenance, and deployment

Moffett Field, California, US

• Worked in a 24x7x365 environment to monitor, detect, and report suspicious and hostile activity on NASA networks
• Analyzed IDS events within a SIM console well within time and quality tolerances
• Used tools such as Wireshark and Splunk to detect and analyze system compromises, including but not limited to successful infiltration and exfiltration of data by foreign domains
• Detected and reported over 500 confirmed incidents across the Agency in a 16 month period

Global, US

• Worked in a 24x7x365 environment supporting multiple supercomputing systems, including Pleiades, which was at one time the 3rd most powerful supercomputer in the world
• Assisted in bringing the supercomputer Pleiades to production status by working closely with the system administration team and reporting issues as they arose, such as hardware failures, software misconfigurations, or.
• Trained operations staff on the difference between the Portable Batch System on a multi-node, low CPU count supercomputer versus the older, single node, high CPU count supercomputer
• Provided excellent user support via e-mail or phone to various researcher, including the NASA shuttle team
• Created and shared basic shell scripts to assist in the automation of every day duties as required, saving multiple man-hours across the entire group