Jack Reedy Email & Phone Number

Cary, North Carolina, Us

New York, Ny, Us

Global Incident Response Operations and the occasional special project.

As a member of the Marine Corps Headquarters Cyber Security Assessment Team, I was directly responsible for the regular assessment of the National Capital Regions (Virginia, Maryland, and the Pentagon) defined cyber security technical controls. These would be summarized, consolidated, and then presented to the USMC Authorizing Official (AO) for approval.While in this position, I was assigned as the Information Systems Designer for the sections "Cybersecurity Assessment Methodology" course. This was a special project to update and transition the current course material from PowerPoint slides to a globally accessible Learning Management System (LMS), which would provide required training content to an audience that is responsible for the accreditation and authorization of 95% of the systems regularly used in the Marine Corps.

The Cyber Protection Teams act as an advanced internal cybersecurity consulting group, where they evaluate and assess the customer networks to identify previously unknown threats, vulnerabilities, or compromise; which supported the cyber defensive strategy of the enterprise operations for the Marine Corps. I acted as a security engineer, intrusion detection analyst, incident manager, thought leader, mentor, and an incident response subject matter expert. Some of my summary accomplishments include:- I Conducted Cyber Key Terrain Analysis, Vulnerability and Compliance Assessments, Threat Emulation, Threat Hunting, Digital Forensics, Incident Response, and Methodology Transfer in support of DCO- I Trained and developed 38 highly technical personnel from the establishment of the Cyber Protection Team (CPT) to Full Operating Capability, one year ahead of schedule- I Developed tactics, techniques, and procedures for CPTs to conduct DCO, increasing the speed of mission executionI assisted the Cyber Network Defense (CND) Manager with administrative duties, operational requirements, and personnel management. During the periods of the CND Managers absence, I was the acting manager for operations and administration. I created multiple tools in BASH and PowerShell that assisted with the automated collection and analysis of large data sets when other options were not available. This data would be centralized, normalized and then evaluated for signs of compromise, using several analytical methodologies. With these processes, I have helped review 3,500+ enterprise end-points for signs of compromise, threat, or vulnerability. I am proud to say I have repeatedly found or assisted in the search for the United States Marine Corps Red Team. These Individuals are NSA accredited and create custom attacks.

While assigned to the teams, I had two primary roles. The first came with operations and the second came in preparation and the advancement of our capabilities. Between assigned operations, I supplemented capability development with documentation of the team process. Furthermore, I created and then instructed 3 separate training courses on incident response operations. I began with end-point level security analysis and then branched into raw network analysis. The end-point and network level analysis course culminated in files that were several Gigs in size. This forced students to become fluent in the analytic filtering techniques taught throughout the course. The final course taught SIEM technologies and mass analytics. This taught students cybersecurity analytics starting at the end-point, extending to the network communications, which culminated in an expansion to a small network of 100 end-points, a DC, an Exchange, and several other enterprise technologies. The research I conducted focused on advancing the use of cyber threat intelligence, automation, improvement of our analytic models, and operations efficiency. I researched and helped develop advanced intrusion detection processes and operational protocols to increase the speed of detection and mitigation. These were then incorporated into the instructional curriculum to teach both Marines, Government Civilians, and contractors. Along the way, the teams processes were documented, with recommendations for improvement.I created and then provided training for 40+ individuals, which led to a potential savings of $200,000 (based on the current market price). I assisted with the 2 revisions of the team toolkit by providing recommendations for improvement. These kits are fielded to 13 different teams and are worth $2,400,000+ each.

This was the initial service level team within the Marine Corps. Without minimal guidance or training, the newly formed team began operating. I supported the required development of the team’s operational guidance and researched multiple operations processes.Installed, administrated, maintained, and operated a NSM with Threat Intelligence. Acted as a cyber security consultant for incident response operations to multiple customers. Developed custom signature detection rulesets across multiple vendor enterprise systems. Assisted in creating the foundational standard team procedures of team operations. Conducted Threat Hunting operations to detect possible Advanced Persistent Threats. Analyzed enterprise architecture and deployed monitoring solutions in 3 days or less. Awarded for identifying 30+ adversary events in 10 days and providing mitigation solutions.As a subject matter expert of team operations, I was moved to the CPT 652 team to provide initial team development experience.

This organization is a part of a larger Cyber Security Service Provider and is responsible for the 24/7 intrusion monitoring efforts for the entire USMC network of 120,000+ end-points. As the operations shift lead I was responsible for the coordination of the Incident Management process. Remotely investigated host systems to correlate alert data with digital forensic artifacts. Reported on investigation findings and provided recovery actions or detection modifications. Managed incidents post initial reporting to include follow on analysis, data collection, threat vector identification, determination of scope, and application of lessons learned. Trained 10 analysts on incident response processes and enterprise defensive architecture. Lead a team of 6 in daily requirements supporting the Incident Response actions.

Provided senior leadership guidance on compliance issues and taught 1200+ end-users IA practices.

Maintained $1.4M+ of communications equipment across 50 miles of a combat zone without loss.

Established the organization help-desk, managed a staff of 8, and planned network/systems projects.

Rapidly installed, configured, and administrated deployed network solutions with satellite technology.

Bachelor Of Science - Bs, Cloud Computing

Bachelor’S Of Science Degree, Cyber Security Management And Policy