Richard Ignacio Email & Phone Number

Phoenix, Az, Us

Denver, Colorado, Us

San Diego, Ca, Us

Long Beach, Ca, Us

Scottsdale, Arizona, Us

Dallas, Tx, Us

I support an AT&T contract with the Federal Judiciary. For this role, I am a part of the SOC engineering team building tools and processes to support the SOC. Some of my responsibilities include:• Lead the development of various Python-based software like Splunk apps, a custom Python package for the SOC, and miscellaneous parsing and integration scripts• Design the initial CI/CD architecture for their Python tools, Splunk apps, and Phantom playbooks and apps• Act as Scrum Master to lead their sprints and to advocate for agile methodologyAfter I joined the team, I lead their transition to an agile framework with Scrum. I introduced coding standards, modular code through the building and maintaining a custom Python package, and an increase in automation by using APIs to integrate many of their processes.Key skills associated with this role:* API Integration * RESTful API * Python * Splunk * Automation * SOAR * Agile * Scrum * Cybersecurity

Milpitas, California, Us

I managed the Security Orchestration Architecture Team but remained active in the technical aspects of the organization.

Milpitas, California, Us

In this role, my main responsibility was to develop plug-ins in Python for the FireEye Security Orchestrator (FSO) and design security playbooks that implement customers' use cases. This sometimes required supporting a customer directly on-site including teaching workshops about FSO and plug-in development.

Mountain View, California, Us

As a part of the Deployment & Integration (D&I) group, one of our primary goals is to ensure the success of our clients. As a client-facing consultant, I use a broad range of skills along with my experience in information security to deliver various services for our clients. A sample of the services I provide for clients include the following.• Deploying various FireEye products (specializing in HX, MIR, PX, and IA)• Integrating third-party software with FireEye products• Creating and assisting with engineering custom solutions for clients• Conducting hands-on knowledge transfers with clients• Conducting various cyber security workshops for clients• Designing reference architectures for FireEye’s endpoint products• Conducting multiple-day informal training on endpoint products• Developing and writing playbooks for SOC personnelInternally, some of my responsibilities include:• Documenting techniques and procedures for the D&I community• Developing tools for the D&I community• Supporting other consulting service linesIn addition, I have working knowledge of the following:• Network-based forensics and tools• Host-based forensics and tools• CERT/CIRT operations

Arlington, Virginia, Us

Supporting a contract with the DoD, I led a penetration testing team within a cyber unit, where I held multiple roles:As a penetration tester:• Assessed and exploited vulnerabilities within our AOR as a part of an authorized mission or order• Deployed to remote locations to conduct security assessments of DoD units• Evaluated, tested, and vetted new tools for incorporation into the approved suite of penetrationtesting tools• Maintained expertise in the existing suite of approved penetration testing tools• Analyzed assessment results including determining false positives and identifying trends• Prepared presentations and reports of the results of the assessments• Briefed high-ranking officers and executives of the resultsAs a CND tools developer : • Developed several tools in C#, PHP, and Perl: - a complete end-to-end web-based phishing management application - a custom agent with a custom C2 server that used various APT techniques - several vulnerability scanning and exploitation scriptsAs the lead for the penetration testing team:• Managed a team of highly technical security professionals• Enhanced and develop the team’s cyber defensive capabilities• Maintained and develop tactics, techniques, and proceduresAs a penetration testing instructor:• Taught an approved penetration testing methodology• Certified the candidates as DoD penetration testers

New York, Ny, Us

As Vulnerability Management Lead:• Designed, deployed, and managed a $1M+ global IDS solution and a global automated vulnerability management solution• Solutions consisted of the SourceFire IDS/IPS, nCircle IP360, and RedSeal SRM productsLed and developed the global vulnerability management program• Operationalized the vulnerability management program• Chaired/Coordinated the monthly vulnerability management meeting globallyLed and coordinated penetration testing• Created the internal penetration testing program• Coordinated and managed external penetration testingLed the configuration compliance program• Solution consisted of the Tripwire Configuration Compliance Manager• Supported all audit and compliance activities within my responsibilities• Responsible for process and policy documentation, metric generation and reporting, and for preparing and meeting with external auditors to satisfy legal and regulatory requirementsAs Senior Security Engineer:• Managed and maintained the internet facing services (DNS, Web, Proxies, firewalls and FTP)

Bachelor Of Science, Computer Science

Computer Engineering