Robert Tremblay Email & Phone Number

Manchester, Nh, Us

Manchester, Nh, Us

Chicago, Illinois, Us

Tasked with identifying and containing potential beaches of PCI card holder data, leading incident response efforts for PCI DSS violations, ensuring adherence to PCI investigation and notification protocols, and collaborating with cross-functional teams to drive investigations, remediation efforts, and ensure ongoing PCI compliance. • Developed and established PCI incident response protocols and compliance checklists.• Managed the digital transformation of log data for indexing in Splunk and Kibana.

Manchester, Greater Manchester, Gb

Provide DFIR services to clients, including forensic analysis, EDR implementation, threat hunting, tabletop exercises, and training. Engineer duties include using python scripts and the AWS CLI to configure and utilize AWS cloud infrastructure for incident response.

Seattle, Wa, Us

Lead information security investigations and improvements with multiple teams to safeguard corporate assets, sensitive data, and brand reputation. Manage all SOC escalations generated from some of the following: sensor detections and alerts, HackerOne submissions, and phishing emails.

Armonk, New York, Ny, Us

Led security incident investigations through multi team collaboration, focusing on IBM owned or managed digital assets located on-site, virtually, IBM Government Cloud (IC4G) FedRAMP, and hybrid cloud environments. Oversaw the triage, coordination, and completion of investigations, including forensic data acquisition, archiving, analysis, and the presentation of findings. Investigations covered incidents such as ransomware, vulnerabilities, 3rd party reported compromises, publicly exposed private credentials, intellectual theft, fraud, business email compromises, copyright piracy, data recovery, and escalations from the threat hunt and SOC teams.• Investigation experience on cloud platforms IBM, AWS, and Azure including forensic acquisition, archival, and analysis of the data such as: audit, flow, PCAP, and network logs; virtual server instances; storage buckets; virtual network appliances.• Proficiency with investigations involving: Docker images; containers; Kubernetes networks; various log formats; Windows, MAC, Linux, and AIX operating systems; various log formats; EDR alerts or threat hunting activity.• Strategic and Tactical threat hunting on the corporate infrastructure utilizing internal resources including EDR. • Engineer duties include utilizing Cloud environment CLIs along with the relevant API access procedure; configuration, deployment, data ingestion, and effective utilization of log ingestion tool suite Elasticsearch/Kibana/Logstash. • Created the IBM CSIRT Ransomware Runbook to standardize ransomware investigations.

Led digital forensic investigations for clients, spanning various scales, with specialization in ransomware, web server, and business email compromises on Windows operating system workstations and servers. Senior consultants were responsible for the client coordination of the forensic acquisition, archival, analysis, and the subsequent presentation of the findings. • Configurated and deployed company developed software agents for forensic collection and analysis. The deployment provided a proficiency in log ingestion tool suite Elasticsearch/Kibana and the processing being conducted in the Cloud AWS platform. Splunk was utilized prior to Elasticsearch/Kibana. • Administered, maintained, and monitored EDR sensors for Carbon Black, CrowdStrike, and Endgame supporting investigations that included alert management, Tactical threat hunting, forensics analysis of sensor data, and remediation of the compromise.

Ashburn, Virginia, Us

Provided DFIR client consulting services to major corporations and governmental organizations. The client solutions encompassed comprehensive digital compromise investigations, eDiscovery support, tabletop exercises, and proactive enhanced threat detections with EDR. • Managed numerous multi-scale client compromises that included forensic acquisition, archival, and analysis of workstations and servers within intricate corporate environments. Deployed, administered, and managed CrowdStrike and Carbon Black EDR sensors that were utilized in investigations, which include alert management, threat hunting, forensics analysis of sensor data, and remediation of the compromise.

Vienna, Va, Us

Instructing government and corporate digital forensic examiner students, specializing in mobile digital forensics, by combining the Cellebrite curriculum with insights from my current fieldwork experiences.• Specialization in the rooting and JTAG acquisition and processing of cell phone evidence.

Served as the digital forensics lead digital crimes subject matter expert and Detective for the City of Manchester NH Police Department and numerous U.S. Federal agency task forces from 2007-2017. Duties included: enforcing the laws of NH; investigating incidents; conducting interviews; public speaking; completing sworn affidavits; search warrants; arrest warrants; court testimony; maintained the ICAC/Homeland Security Investigations lab for two years; forensic acquisition, archival, and analysis of numerous workstations and mobile devices; presentations of the findings to audiences with differing technical proficiency

Masters In Digital Forensics, Digital Forensics

Criminal Justice, Criminal Justice/Police Science