- Directed cyber security actions, policy and governance, and incident management for Fairchild AFB classified and unclassified networks covering 800+ endpoints, 190 infrastructure nodes, and 70 server assets for 4800+ users. Acted as Installation Systems Security Manager accomplishing Risk Management Framework actions to secure Authority to Operate approvals for base systems. Led a team of cyber security analysts and defenders developing and maintaining a proactive cyber security posture and building positive security culture mindset.- Applied risk governance principles to develop and implement comply-to-connect policy for classified and unclassified networks at Fairchild AFB covering 4800+ users. Conducted network audits using Tenable's Nessus to provide data driven decision making in ambiguous situations and competing priorities raising vulnerability scan success rates 58% to 95%.- Developed IPSEC-ISAKMP security architecture for departmental CIO mobile communications platform to allow secure end-to-end data exchange in austere environments saving $530K by avoiding vendor solution.- Hardened 78 systems providing security for $4.2B of federal client aircraft by communicating with client stakeholder’s threat working groups; coached analyst team in utilizing Powershell, Trellix/McAfee (HBSS) & Tenable Nessus (ACAS) to ID and fix- Transformed organizational security for 28 external client directors by creating a CTI cell across 3 departments, conducting threat briefings, and authoring a 78-page risk mitigation plan that identified key assets and IR priorities

- Charged with revitalizing culture for 8 direct reports and 100 employees while modernizing infrastructure, security posture and service delivery. Dedicated $60K to training programs and challenged employees to complete one new certification training each year. Scheduled immersion briefings with operational offices to understand the impact of IT across the organization. Project and ticket completion rates doubled as a result of 80% of employees participating who lauded the program for instilling ownership, personal value, and understanding of how they each contributed to success.- Established and conducted engineering working groups and change control boards for IT project evaluation and implementation. Formalized the participation of stakeholders and documentation of proceedings closing 17 large projects totaling $7M for new software and systems implementations.- Developed and successfully executed $5M strategic plan to modernize 5 enterprise environments over 5 years including virtualized backend technologies, campus infrastructure, and virtual desktop interfaces aligning with and projecting scalability with 10 year strategic business goals. - Completed an evacuation solution for the European Air Operations Center to meet national defense requirements for continuity of operations. I drafted the Memorandum of Understanding between 4 different bases and worked with DISA to establish an alternate circuit for network path redundancy. The full solution accounted for resuming critical operations within 1 hour and full operations within 8 hours for 200 personnel at multiple sites.- Reviewed $4M government simulation environment contract for DOD FISMA alignment and revamped requirements of cyber and IT positions updating the technology and experience requirements. This saved the government $540K in rehiring costs, downtime due to empty positions, and vendor specialist short hires to cover expertise gaps.

- Awarded $400K budget to lead the implementation of USAF Europe Commander directed, first of its kind, small Unmanned Aerial Systems(sUAS) network creation. The goal was to emulate the adversaries equipment and capabilities requiring "dirty" networks. My team built a "dirty" network with a smaller honeynet to siphon malicious activity off for monitoring. The first ever sUAS defense scenarios used at deployed location air defense evaluations used tactics researched on this network.- Applied risk management using NIST 800 standards for 4 enterprise environments and DoD authority to operate packages hosting 27 networks. Detailed the mitigations of 1800 security controls for each package and streamlined package submission with zero returns for corrections resulting in 3 year expirations awarded instead of standard 2 year.- Built IR and COOP plans for 8 client organizations conducting a BIA and risk analysis with client directors. Established a $1.2M AWS cloud backup for transfer of services during disaster saving $1.5M in hardware upkeep costs and codified regular testing through tabletops and test exercises.- Eliminated Log4j in 10 days across 4 enterprise environments by leading a 10-member incident response investigation, communicating with external clients, and performing triage, host/network forensics, and log analysis resulting in no indicators of compromise (IOC).- Built SIEM and EDR architecture using Trellix ESM for 400 hosts and servers providing greater visibility into network activity and increasing IR team response and resolution time by 85% through automated actions and consolidation.

Volunteer member of SANS GIAC Advisory board and forums. Contributing to forum topics and discussion, providing occasional advisory input and some related forum communications. Membership is by invitation only.