- Developed an Elastic enrichment pipeline to apply various hygiene rules, scoring network flows as to their relative chances of being a false positive based on public and privately available domain information.- Designed and managed a Logstash configuration mapping network security events to common schema fields and enriching the events as able, via built-in and custom processors.- Managed team AWS infrastructure, threat intelligence platform, and zero-trust access solution.

- Spearheaded efforts to implement infrastructure-as-code and least privilege permissions among existing team projects in an AWS environment with minimal downtime.- Built a task-based indicator retrieval and enrichment framework to generate leads on malicious network activity. - Researched various cyber threat TTPs and APT groups to inform future analytic and product development.- Implemented a comprehensive SlackOps monitoring system, to include application errors, CI/CD status, and container uptime tracking.- Updated documentation processes to automatically build and push changes to dedicated websites.- Deployed and managed a high availability threat intelligence platform for both internal and external use.- Created a service to collect IDS/IPS rules from vendors, merge in proprietary rules, and deploy to customers.

- Performed ad-hoc hunts for to detect adversarial activity within SIEM logs.- Analyzed the potential impact of emerging threats to identify malicious activity occurring across the operational environment. - Responded to computer security incidents by coordinating efforts with multiple business units, including upper leadership.-Rewrote a high-volume PCAP search tool that searched across all distributed sensors and stitched the resulting traffic back together to better handle increasing performance and analyst demands.

- Lead instructor for the Windows/Linux Security Concepts module, responsible for up to 24 students.- Taught and enhanced a CNO curriculum covering exploitation methodology, tradecraft, threats (including security products and malicious software), access methods, remote forensics, and risk analysis.- Developed both Windows and Linux simulations complete with fake users, routine applications, and malware that could be encountered in a business environment for students to learn CNO risk analysis concepts.- Created a guided buffer overflow/heap spray lecture to demonstrate to the class how to accomplish a simple buffer overflow exploit with publically available tools and techniques.- Overhauled module infrastructure to utilize deployment scripts for creating exercise hosts on demand.- Demoed numerous capture the flag VMs for students to complete as a more traditional pentesting challenge. For those not familiar with techniques, mentoring on webapp testing, SQL injection, buffer overflows was provided.- During breaks between courses, researched APT groups, publicly documented compromises, penetration testing tools, techniques, proof of concept vulnerabilities and exploits so as to better understand the environment students would be entering in the operational environment.- Transitioned course examinations from written to electronic so as to standardize grading and meet customer requirements.

- 2nd shift lead as part of the 24/7/365 security monitoring team, providing leadership and guidance to coworkers.- Updated and implemented new analyst dashboards/views based on current threats, intelligence, and known vulnerabilities. - Analyzed the potential impact of emerging threats to identify malicious activity occurring across the operational environment. - Responded to computer security incidents by coordinating efforts with multiple business units, including upper leadership. - Directly responsible for coordinating meetings, addressing concerns, and generating monthly IDS reports for customers. - Primary POC for classified spill remediation by facilitating between industrial security officers and system administrators.

- Performed preventative maintenance, authorized modifications, functional, and operational checkouts on aircraft mission equipment. - Troubleshot and repaired equipment electrical components using technical manuals, wiring diagrams, and fault isolation procedures. - Implemented training plans for junior technicians through instruction and guidance of proper technique.- Certified on the inspection, loading, and removal of various munitions within the USAF inventory

- Oversaw flight COMSEC program; implemented the training plan, managed closed area, and issued cryptologic GPS devices. - Performed preventative maintenance, functional, and operational checkouts on aircraft weapons systems.- Certified on the inspection, loading, and removal of various munitions within the USAF inventory. - Directly managed two journeymen Airmen and responsible for numerous others while performing under my supervision.

- Provided hands-on technical support and advice for installed applications. - Ensured proper allocation of University equipment to authorized users only.