↜ Rob Pantazopoulos ↝ Email & Phone Number

• Served as team lead for the malware research function at Secureworks. Advised on process and technology decisions. Established and maintained inter-departmental relationships between Threat Research and teams critical to our success such as Detection Research, Engineering, Support, and Incident Response.• Represented Secureworks in the public eye and promoted our malware research capabilities via media interviews, public blog posts, and technical presentations based on research I had… Show more • Served as team lead for the malware research function at Secureworks. Advised on process and technology decisions. Established and maintained inter-departmental relationships between Threat Research and teams critical to our success such as Detection Research, Engineering, Support, and Incident Response.• Represented Secureworks in the public eye and promoted our malware research capabilities via media interviews, public blog posts, and technical presentations based on research I had performed.• Performed static, dynamic, and code-level analysis of malicious x86/x64/ELF binaries/shellcode (IDA Pro/OllyDBG/x64dbg), Microsoft Office documents, PDFs and more. • Through code-level research, identified and fully documented malware family details such as execution flow, capabilities, generated artifacts, code sharing, and C2 communication structure/purpose.• Contributed to the development of countermeasures (Yara/Snort/EDR signatures), malware family classifications, IOC feed enrichment and client-facing research publications (TIPS / Threat Analysis).• Developed automation that expedited, streamlined, and/or enhanced the malware research process including, but not limited to, configuration/payload extraction/tracking systems, binary patching/deobfuscation scripts, and IDA Pro scripts, Show less

• Contributed to team’s roadmap strategy. Identified gaps in capabilities, developed solutions, and advised on priorities. • Provided reverse engineering services for SOC/IR teams. Utilized tools such as OllyDBG and IDA Pro to dissect malicious binaries in an effort to identify unique characteristics that were then fed into detection technologies.• Implemented a Collective Intelligence Framework (CIFv2) instance. Configured and maintained numerous public, private, and premium… Show more • Contributed to team’s roadmap strategy. Identified gaps in capabilities, developed solutions, and advised on priorities. • Provided reverse engineering services for SOC/IR teams. Utilized tools such as OllyDBG and IDA Pro to dissect malicious binaries in an effort to identify unique characteristics that were then fed into detection technologies.• Implemented a Collective Intelligence Framework (CIFv2) instance. Configured and maintained numerous public, private, and premium threat feeds. Push high-confidence observables such as IPs, domains, file hashes, and email addresses into numerous detection technologies.• Collaborated with industry peers and law enforcement to address Business Email Compromise (BEC) related threats. Frequently interacted with threat actors in an effort to identify their tactics and infrastructure. • Delivered threat briefings to executive leadership on current threat landscape applicable to the financial industry. Also delivered several educational brown bags to SOC/IR teams in an effort to foster professional growth. Show less

Phoenix, Az

• Rebuilt the existing Security Operations Center into a high-performing team of Tier-1, Tier-2, and Tier-3 security analysts providing 24x7x365 security monitoring and incident response services for the corporate network.• Defined and promoted the CIRT/SOC's critical objectives such as mission, vision, & values and implemented structured roles & responsibilities.• Achieved a 4/5 maturity capability rating from a 3rd party security firm for my team’s Incident Response… Show more • Rebuilt the existing Security Operations Center into a high-performing team of Tier-1, Tier-2, and Tier-3 security analysts providing 24x7x365 security monitoring and incident response services for the corporate network.• Defined and promoted the CIRT/SOC's critical objectives such as mission, vision, & values and implemented structured roles & responsibilities.• Achieved a 4/5 maturity capability rating from a 3rd party security firm for my team’s Incident Response function.• Implemented a ‘Mentor Up’ program consisting of internal training and clearly defined requirements that accelerated Tier 1 analyst’s path to promotion.• Implemented a 3-week onboarding program that leveraged structured delivery of access, shadowing, and training in an effort to accelerate the new hire’s transition to their shift while ensuring the analyst’s competency.• Frequently assessed incident response capabilities, monitoring visibility, and operational maturity and defined action plans to remediate identified gaps.• Actively led incident response efforts for a number of high-profile information security related incidents.• Developed custom python API’s that contributed to the automation of multiple threat containment techniques. Show less

Glendale, Az

• Assisted with the implementation of Bechtel’s first 24x7x365 Security Operations team. • Defined shift configuration, analyst tiers, roles and responsibilities, and an internal training program.

Phoenix, Az

• Played key role in the implementation of Apollo Group's first security operations center which included both monitoring and response functions.• Staffed and mentored a 24x7x365 team of Tier-1 and Tier-2 cyber security analysts and leveraged the SANS Incident Response framework to develop response plans and detection/containment capabilities.• Developed a metric/reporting solution, utilizing python and postgres, which enabled near real-time Key Performance (KPI) tracking. Among… Show more • Played key role in the implementation of Apollo Group's first security operations center which included both monitoring and response functions.• Staffed and mentored a 24x7x365 team of Tier-1 and Tier-2 cyber security analysts and leveraged the SANS Incident Response framework to develop response plans and detection/containment capabilities.• Developed a metric/reporting solution, utilizing python and postgres, which enabled near real-time Key Performance (KPI) tracking. Among other things, this solution served as primary justification for additional headcount and enabled a more accurate assessment of analyst performance. Show less

Scottsdale, Az

Burlington, Ma

• Managed twelve direct reports providing application support and development within a diverse 24x7 production environment.• Ensured regulatory compliance based on IT audits/reviews and IT corporate governance, including SOX, SSAE 16, SAS70, and HIPAA.• Played key role in major migrations stemming from several large M&A’s including Coventry's acquisition of Concentra Health Care.• Responsible for approximately 6000 individual job runs which imported, processed, and… Show more • Managed twelve direct reports providing application support and development within a diverse 24x7 production environment.• Ensured regulatory compliance based on IT audits/reviews and IT corporate governance, including SOX, SSAE 16, SAS70, and HIPAA.• Played key role in major migrations stemming from several large M&A’s including Coventry's acquisition of Concentra Health Care.• Responsible for approximately 6000 individual job runs which imported, processed, and exported millions of worker’s compensation documents on a daily basis.• Defined standard operating procedures, production enhancements, and reports to ensure the integrity of operations.• Designed and administered SharePoint sites for Infrastructure division. Show less

Burlington, Ma

• Organized efforts across several groups to aid with process improvements and troubleshooting production issues.• Served as Main point of contact for all Operations related inquiries.• Ensured all EDI transmissions monitored by Operations exceeded quality and SLA standards.• Wrote technical specifications, support documentation, and process flows.• Acted as the Change Authority of the Change Advisory Board (CAB) for production changes.• Provided training… Show more • Organized efforts across several groups to aid with process improvements and troubleshooting production issues.• Served as Main point of contact for all Operations related inquiries.• Ensured all EDI transmissions monitored by Operations exceeded quality and SLA standards.• Wrote technical specifications, support documentation, and process flows.• Acted as the Change Authority of the Change Advisory Board (CAB) for production changes.• Provided training and coverage for all Level I & II technical support personnel. Show less

• Performed Level I technical support• Ran nightly backups and cloning• Monitored file systems and the data center's physical environment• Documented all downtime events and maintained an on-call escalations log• Created shift turnovers to update the next shift with the past events for the day

• Configured network of content servers during installation, testing, and deployment stages.• Used shell scripting to automate everyday tasks.• Created technical writings for present and future procedures.• Managed pickup and delivery schedule for content servers.

Computer Science

Education record