- Project Leader since 2019 for 10+ periods of performance: cyber-criminal investigative ops and capabilities, case linking/prioritization, darknet, and cryptocurrency/digital assets. Currently assist internal research (IR&D, aka MIP) as PI/co-PI for both research and transitions across multiple LEAs.- Previously technical & project-level leader in cyber operations and DFIR (digital forensics and incident response). Fan of Super Timelines. Previously PI for Internal R&D (aka MIP) around smart contract analysis, symbolic execution for RE, and secure information sharing. Also previously Group Leader, first line resource manager. Assisted early days of ATT&CK, designed custom proxy/dummy red-teaming tools for training purposes capable of emulating known TTP. Significant data pipeline architecture (and development) experience for integration, CI/CD, ETL, analyst focused UX, and report generation.- Multiple PRAs, Officer's, Director's, and other awards that I'm proud of.

- Refactored ISA 564 Security Laboratory, a MS/PhD course for hands-on exposure to security tools and topics.- Tied previously loosely connected techniques and topics into cohesive Cyber Kill Chain storyline.- Added lectures and labs on Windows shellcode and exploitation, 64b considerations, basic shellcode obfuscation, malware reverse engineering, dynamic and static analysis of binaries, C2 analysis, network signature creation, lateral movement, Powershell/WMI, APTs (nation-state vs crime vs hacktivism).- Integrated industry applicable tools: Git, assembly, and Python; as well as exposure to IDA Pro, OllyDBG, Kali, Armitage/Meterpreter/Metasploit, GCC/Makefiles, GDB, Scapy, Snort, and several others.

- Investigated methods for filtering and augmenting SIP traffic in order to protect end user under a NSF grant.- Developed exploits and defense mechanisms for VoIP software.- Researched privacy in mobile environments.- Developed, implemented, and published mobile device security tools that prevent audio bugging software from capturing microphone data.- Researched malware defense mechanism through binary injection and another sense of self.- Created a forensics binary extraction and observation tool called CodeXt based on symbolic analysis and emulation.Led to publications:- Disabling a Computer by Exploiting Softphone Vulnerabilities: Threat and Mitigation.- VoIP shield: A Transparent Protection of Deployed VoIP Systems from SIP-based Exploits.- Roving Bugnet: Distributed Surveillance Threat and Mitigation (journal version).- Roving Bugnet: Distributed Surveillance Threat and Mitigation. - An Empirical Investigation into the Security of Phone Features in SIP-based VoIP Systems.- On the Feasibility of Launching the Man-In-The-Middle Attacks on VoIP from Remote Attackers.Led to press:- Paul Marks. "'Bugnets' Eavesdrop on You Wherever You Go." New Scientist issue 2743 (16 January 2010), p. 17.

- Worked in the Information Operations group. - Details restricted.

- Investigated Snort IDS rule pattern optimization methods.- Gathered usage and construct statistics for future publications.- Project involved a parallel finite state machine pattern matching engine.- Developed software extensions for the project that supported importing patterns and inter-pattern relationships from the Snort rule set.- Assisted verification of engine integrity during expansion of pattern support.

- Headed performance testing using SmartBits with high-speed network security technologies developed during thesis research. - Created a working demo prototype of the function-parallel design and the data-parallel design for a basis of comparison using OpenBSD.- Created testing suite for automation and control of the various systems under test using Perl, C, and bash scripting.- Investigated parallel IDS/IPS using Snort engine.- Served as a technical advisor to the board and met with potential investors.- Company successfully exited by sale to Centripetal Networks.

- Research with Dr. Errin Fulp sponsored by a U.S. Department of Energy grant.- Investigated methods for optimizing firewalls, security policies, and intrusion detection in high-speed networks.- Developed theory and tested implementations of distributed firewall architectures which were developed during undergraduate research.- Analyzed and presented research at flagship conferences.- Created theoretical groundwork for function-parallel rule distribution.- Developed discrete event simulator for modeling.- Created initial prototype from off the shelf components for experimental results.Led to patent:- Method, Systems, and Computer Program Products for Implementing Function-Parallel Network Firewall, U.S. Patent No. 8,037,517.Led to publications:- A Function-Parallel Architecture for High-Speed Firewalls.- Effects of Processing Delay on Function-Parallel Firewalls.- Parallel Firewall Designs for High-Speed Networks.

- Essentially Twitter for AOL Instant Messenger.- Internet startup used by over 12,000 people to aggregate data from over 500,000 user profiles.- Considered "extraordinarily prescient" by technology commentator Anil Dash.- Implemented and co-designed a user-friendly LAMP front-end and highly scalable parallel Perl/MySQL back-end to store and analyze data in real-time.- Data was used to determine trends and advertising strategies.- Created and administrated data-mining modules, security policies, database schema, DNS, and web server setup.Led to press:- Mary Beth Marklein. "Students Have 'Away' With Words." USA Today (29 March 2004), sec. D, p. 7.- Laura Sessions Stepp. "Posting Their Lives, Moment By Moment." Washington Post (9 July 2004), sec. C, pp. 1-2.- Sarah Mansell. "New Software Reveals Popularity of 'Away' Messages on College Campuses." Wake Forest University News Service (12 February 2004).

- Assigned as personal technology liaison to Associate Dean of the College.- Provided support and assistance to faculty, staff, and student users in person and over the phone.- Led restructuring of BCS website, designed templates, reduced space consumption by 25%.

- Maintained Token Ring and Ethernet infrastructure.- Managed Novell and NT servers.- Provided face-to-face general computing support.