www.attackresearch.comAttack Research (AR) is a boutique security firm located in Northern New Mexico which specializes in advanced information security; especially concerning targeted and sophisticated attacks.  Rather than offering security-only focused solutions, AR works to understand the client’s business needs in order to tailor the best solution possible.AR brings extensive experience operating in a broad variety of complex environments including sensitive government networks and Fortune 500 companies from finance and avionics to oil & gas.  AR is well known in the information security research community, having presented numerous times at Blackhat, Defcon, SANS and other similar conferences.

 Program Management of the Institutional Information Security Portfolio• Worked with the CISO and a small team to administer the FY10 budget of $16M• Led a team to plan and develop the FY11 budget of $16M• Challenges included absorbing an 8% increase in overhead tax, a 10% fund reallocation, and significant project prioritization changes from FY10 Information Assurance Leadership• Senior Cyber Security Leader for PADWP• ADW voting member for Information Architecture Steering Committee (IASC)• Added programmatic input to IT/IS polices and IT/IS organizations’ deliverables Programmatic technical work on classified and unclassified projects Mentored X-DO Information Assurance Team members and students

 Manage the X-DO Information Assurance Team • Responsible for annual budget of $1.5M• Line manager for a team of seven technical staff• Provided strategic IT and Information Assurance leadership for X-Division• Successful implementation of numerous high-profile projects, including capital projects• Organized and drove IT initiatives requiring cross-directorate cooperation Operational Information Technology and Cyber Security• Led and conducted penetration testing efforts• System administration in support of special classified projects• Chief Architect for X-Division IT infrastructure

 Research, design, and implement projects in support of programmatic IT and Information Assurance• Ultra-thin clients for desktop interaction (Sun Ray, ClearCube)• Developed Laboratory model for thin computing: Red Hat Linux, Solaris 10, Windows over Citrix • Prototyped “FollowMe” printing lifecycle system• Researched and deployed VirtualGL and nVidia Quadroplex visualization technologies• Sun N1 Grid Engine• IDS/IPS: network and host-based tools (PureSecure, Sentarus, iptables, TCP wrappers, bigeye) Maintain and improve operational IT infrastructure• Large file servers: 200 TB / UFS, NTFS, NFS, Samba, CIFS• Print servers: UNIX and Windows• Software servers: Commercial software and GNU software• Web servers: Apache, IIS, Stronghold• Database servers: PostgreSQL, MySQL• Compute servers and HPC clusters: Open MPI, LA-MPI, MPICH, MPICHNT• Enterprise system administration: Solaris, Red Hat Linux, IRIX, Windows, and Mac OS• Systems automation: cfengine, Prism, Active Directory, SMS• Penetration testing: nessus, nmap, Core Impact Policy and Compliance• Managed DOE re-accreditation process for Classified LAN• Computer systems documentation and testing• Computer systems policies• Participated in internal and external audits Network forensic investigations Information Architecture Desktop Team leader• Led the IA Desktop Team to develop standard configurations and hardware suites for the entire laboratory

System and networking administration; Solaris, IRIX, Red Hat Linux, WinNT, and Win2000Webmaster for X-Division’s classified and unclassified web serversResponsible for the Tivoli Storage Manager backups on the X-Division networksDuties included OS installs, system deployment, software installations and upgrades, hardware and software troubleshooting, new user accounts and orientation, subnet management, response to cyber security scans, task tracking, data tracking, identifying critical path flow for the network environment and automating these paths if possible.

Worked both alone and with a team of Resident Advisors to enforce university policy, acted as an information point for our customers (residents and their parents), peer counseled, advised and developed programs to enhance the quality of living within the residents hall using both small and large programs.Bi-monthly training in a wide range of human awareness and other job-related topics. Topics included but were not limited to: peer counseling, confrontation and assertiveness, team dynamics, and time management.

Worked as a junior engineer to co-design personal protection systems for high-pressure vacuum systems. This required extensive moment analysis, design of electrical and mechanical interlocks, and design of safety features to protect personnel and critical machinery.Used AutoCad extensively for design of 3-D models and fabrication of personal protection systems.Designed, developed, and implemented facility drawings database for LANSCE-12.Windows NT administrator for LANSCE-12 mechanical team.Machine shop operator.

Worked as a junior engineer to co-design personal protection systems for high-pressure vacuum systems. This required extensive moment analysis, design of electrical and mechanical interlocks, and design of safety features to protect personnel and critical machinery.Used AutoCad extensively for design of 3-D models and fabrication of personal protection systems.Designed, developed, and implemented facility drawings database for LANSCE-12.Windows NT administrator for LANSCE-12 mechanical team.Machine shop operator.

Worked as a junior engineer to co-design personal protection systems for high-pressure vacuum systems. This required extensive moment analysis, design of electrical and mechanical interlocks, and design of safety features to protect personnel and critical machinery.Used AutoCad extensively for design of 3-D models and fabrication of personal protection systems.Designed, developed, and implemented facility drawings database for LANSCE-12.Windows NT administrator for LANSCE-12 mechanical team.Machine shop operator.