Eric John Email & Phone Number

California, United States

Corporate security work ranging from segmenting internal office networks, protecting (Mac/Win/Linux) endpoints, securing remote access, and trying to put the zero in zero trust. Battling against the tide of SaaS proliferation and supply-chain risks to keep our users and employees safe.Also using my extensive background in Detection and Response to help monitor and mitigate our endpoints risks.Generally helping out wherever needed.

Sunnyvale, California

Worked as a security consultant assisting clients with recovering from digital attacks and compromises, performing forensic investigations on Mac, Windows, Linux, and cloud endpoints. Managed the investigation and communications with clients during the highest stress events many of them had ever experienced and helping them recover once the threat was mitigated.

Palo Alto, California

Lead Investigation and response to potential security issues and compromises and communicate status to others.Work on Network Security for aggregating network detection and monitoring into useful data.

Mountain View, California

Performed digital forensics on Windows 7, OSX 10.9+, and Ubuntu 10.04+. Live host and powered down disk investigations, and constructing incident timeline from multiple data sources. Contributed the applicable research to open source projects Plaso, GRR, and ForensicArtifacts. Primary responder to internal security threats and correlating events from host-based and network detection systems. Maintained knowledge of TTPs of Advanced Persistent Threat actors, emerging threats, and kill chains. Configured internal Chrome security profile for all client platforms, reviewed extensions for threats against internal data, and maintained the configurations to ensure both security and usability.Built pipeline using Python for Chrome configuration. It imported data from multiple sources, compiled them into a unified list, and output into Puppet configuration for consumption by managed hosts. Working on this was a cross-team development effort and resulted in some configuration change latency to be reduced from monthly updates to fifteen minute update average.Developed a chrome extension for investigators, utilizing internal threat API’s to identify know threat actors reducing the time necessary to investigate new threats.Contributed and reviewed Python and Javascript code, including reversing Javascript for malicious behaviors targeting web browsers and chrome extensions.Mentored analysts and administrators to help develop their skills and knowledge, and provided technical guidance.

Monitor real-time network and security activity for multiple clients across multiple platforms for Firewalls, IDS/IPS, Web Application Firewalls, and Host-based IPS.Analyze network traffic for emerging security threats and anomalous activity using packet analysis.Configuration and troubleshooting of security and infrastructure devices.Generate programs and scripts for internal use in reporting, analysis, and troubleshooting tasks.Correlate security and infrastructure events for presentation and remediation.Communicate and interact with clients to provide informative resolutions and proactive network configurations.

Setup and configured laptop wireless for connecting to campus network.Assisted helpdesk with repairs and maintenancePerformed service tasks for students needing assistance as well as directing calls and answering questions

Initial setup and maintenance of security systems ranging from network-based IDS/IPS to host-based penetration tools.Performed physical security audit of network vulnerabilities for PCI compliance.Initial setup and maintenance of servers and blade enclosures, providing customization, installation, maintenance, troubleshooting, and updates of both operation systems and physical devices.Assisted in Data Center maintenance and repair, as well as physically preparing racks, servers, power, and network connectivity, and aided in physical network restructuring and development of new physical network.