Scott Elam Email & Phone Number

Portland, Or, Us

• Took a turn as SOC Manager (Acting), fill in as needed. Primary role is back to Sr. Incident Response Analyst.• Use case development and correlation search creation• MSSP on-boarding work• Incident triage and analysis• Incident response• Threat hunting• Insider threat investigations• Data loss and breach investigation and disclosure• Password strength audit (cracking)• Digital forensics• IBM Resilient incident response platform customization• Product testingCurrently working for a bank, keeping the name confidential

• Focus on incident response and digital forensics• Created a forensic imaging and analysis capability• Forensic analysis using open source tools• Threat hunting• Insider threat investigations• Security Operations• Administer the vendor managed SIEM platform (Symantec), respond to alerts• Configure new A/V server, establish policies, deploy to clients, maintain and monitor• Administer and configure security tools, respond to alerts• Various security projects as needed• Worked with Symantec SEP/SEPM and Symantec ATPThis company lost 70% of their revenue shortly after I joined, thus the short time here.

Armonk, New York, Ny, Us

Providing incident response, forensic analysis, and threat hunting services to external clients. External client industries included space launch services, finance and insurance, restaurant chains, truck manufacturing, logistics, healthcare, publishing, utilities. Account manager for 8 to 12 companies with an incident response retainer.

Armonk, New York, Ny, Us

Providing incident response and forensic analysis services to IBM as a member of the internal CSIRT. Types of incidents include: insider threat investigation, Cloud compromise, External actor compromise. Also provide post compromise lessons learned and recommendations.

Armonk, New York, Ny, Us

Providing incident response, forensic analysis, and threat hunting services to external clients. External client industries included space launch services, finance and insurance, restaurant chains, truck manufacturing, logistics, healthcare, publishing, utilities. Account manager for 8 to 12 companies with an incident response retainer.

Sunnyvale, Ca, Us

• Incident response, external actor compromises, security projects, insider threat investigations, eDiscovery, and forensics• Acted as a subject matter expert on DLP and wireless• Wrote procedures, contributed to policies and standards

Austin, Texas, Us

• Retained in 2010 when Sun Microsystems was acquired by Oracle• Continued doing insider threat investigations• Trained on Encase, performed multiple complex forensic acquisitions• Penetration tests of Oracle web applications

Palo Alto, Ca, Us

Team Lead for the internal Information Security Incident Response Team (SunCERT).

Palo Alto, Ca, Us

• Helped create the Sun internal Security Incident Response Team (SunCERT)• Responded to security incidents, coordinated the response, recommended solutions, educated users, evangelized security awareness, and drove change in the organization• Investigated insider threat cases involving intellectual property theft• Investigated internal and external system compromises, recommended changes to prevent future compromise• Combated major malware attacks: Hybris, SQL Slammer, Sadmind, Code Red, Nimda, Solaris Telnetd• Sarbanes-Oxley investigations, California SB1386 violations, FCPA investigations, and export control cases• Policy enforcement, virus and spam response, forensic investigations, employee investigations, analysis of compromised systems and recommended remediation• Evaluated products, including Wifi IDS products from various vendors• Participated on teams implementing IDS, MSSP security monitoring, Qualys vulnerability scanning, and WiFi hotspots• Helped define processes: incident response, investigations, registering Sun-owned IP address and domain name space• Subject matter expert on viruses, spam, Wifi, IP theft, and social engineering

Herndon, Va, Us

• Interactive is a nationwide Interactive Voice Response (IVR) and E-Commerce System developer and service provider• Designed and implemented a large Sun/StorageTek backup platform• Completed training related to network, system, and application security• Participated on a team that developed and implemented our Y2K plan• Designed, upgraded, and maintained large-scale high availability platforms for customers that included FedEx, Longs Drug, and MCI ◦ The FedEx platform was an IVR system with high uptime expectations that provided automated rateinformation, a location finder, and a product ordering system ◦ The Longs Drug platform was an internet portal that allowed customers to get customized health information, purchase products, and order prescription refills ◦ The MCI platform was a pre-paid long distance calling card platform that had extremely high uptime and transaction throughput requirements. It was a geographically diverse two site platform in which both sites were normally hot. We would fail-over to running on a single site in case of a fault or scheduled maintenance

See above, company changed name to XO Communications.

Responsible for all computer systems for a nationwide paging company, reporting directly to the President. Design and development of new and maintenance of existing telephony products. Provide in-house support for customer service and accounting staff; system administration for paging systems based on SCO UNIX with Dialogic T-1 and voice cards; all hardware and software purchasing, installation, maintenance, repair, and upgrades. Install and maintain UNIX network for the paging systems. Create programs for customer service functions and paging analysis. In charge of software consultants and interface with vendors, which includes selecting and managing all vendors, consultants and related projects. Install and maintain Windows For Workgroups office network. Responsible for all aspects of Client/Server conversion project.

Ca

Worked on a turnkey facsimile and voice mail store and forward switch, with a worldwide X.400 based message network, based on a Sequent, UNIX, Oracle, and Unify RDBMS platform. Designed, coded and tested custom transaction charging modules for various customers around the world. Maintained and enhanced the message network billing and settlement system. Responsible for system analysis and design of new message network billing and settlement system.

Portland, Or, Us

Sequent Unix and Unify RDBMS platform for movie rental transaction tracking and charging. Designed and coded tool kits for data validation and retrieval, and report and chart generation. Responsible for database and system tuning and problem resolution. Interim System Administrator and trained new hire. Responsible for system security and wrote utilities for system administration and a replacement for the Unix change password command (passwd). Crisis management for hardware and software emergencies. Researched hardware problems and recommended solutions.

Contracted to the USDA - Soil Conservation Service. Designed and wrote the Wind Erosion Equation (soil erosion due to wind) modeling program in 'C' with an interactive interface on an AT&T 3b2 with UNIX System V. This allowed them to enter the computer age instead of using reference books with tables printed in them to find out how much soil on a farmers field would erode due to wind, considering various factors. Worked on various other team and individual projects. Wrote libraries to standardize applications, including: data entry, specification writing, report generation, curve fitting and modeling. Ported large curve fitting program from FORTRAN to 'C'. System Analysis on several projects. Informal System Administrator.

Computer Science, Philosophy, Physics, Math, A Little Bit Of Everything

Computer Programming, Specific Applications

Computer Science, English

Computer Science, Accounting

System And Network Administration

Incident Response

Education record

Information Security, Incident Response, Digital Forensics