• Monitor 200,000+ endpoints (Linux & Windows) and 8,000+ network devices and servers• Acquire and analyze endpoints and network artifacts for unauthorized activity and document investigative steps in a centralized ticketing system• Analysis and correlate events to determine the scope of an event or incident• Tune and monitor alerting tools (EDR, IDS/IPS, SIEM, mailbox, helpline, etc.) to reduce false positive and alert fatigue • Share known and vetted IOCs and TTPs to create new signals applicable to the environment to rapidly detect nefarious activity• Mentor junior SOC analysts to cultivate a team-oriented environment

• Utilized host-based forensic tools (EnCase/FTK) to create forensically sound images• Completed technical write-ups for network, malware and forensic analysis during investigations• Presented high-visibility cybersecurity events/incidents and findings to the executive leadership team• Conducted root cause analysis on cybersecurity related events/incidents and provided corroborating evidence• Engaged with all business groups, internal Law Enforcement and Management to swiftly contain, eradicate and recover systems properly identified as compromised

Reverse Engineering Malware / Forensic Analyst

• Supervised and accounted for 80+ marines training regiments and transportation equipment• Filed and updated Marine Corp policies and standard operational procedures (SOP’s)• Revised syntax inaccuracy for military merits in lieu of leadership and combat achievements• Assisted personnel members in coordinating activities, preparing award certificates, updating reports, typing and preparing statistical data sheets• Maintained official electronic training logs• Proofread all prepared correspondence, and checks for completeness and conformance to applicable instructions and regulations• Facilitated methods for automating reports and correspondence