· Member of OCIO Vulnerability Management team responsible for the enterprise vulnerability disclosure/notification, tracking, and remediation of all vulnerabilities with the deployed security appliances and endpoint devices both within the network infrastructure as well the network DMZ devices and web facing technologies. · Part of team responsible for scanning all Department of Education web applications and web application databases. Utilized Web Inspect and DB Protect scanning tools. Proactively working with ISSO/ISO and developers regarding the scan reports and providing additional mitigation recommendations and support to help remediate any non-compliant issues with web applications or databases. Provided continuous assessment of vulnerabilities via scheduled monthly scans. · Responsible for analyzing Tenable OS scans, and responsible for creating POA&M templates for systems with past due un-remediated vulnerabilities.Please see resume for full position description

· Recruited to join immature 24/7/365 SOC environment. Utilized my vast SOC experience to help develop SOC maturity via creation/improvement of processes, procedures, and peer/team leadership. · Conducted network and host security monitoring, threat hunting, and anomaly detection using Splunk. · Review/vet third party IOCs and add them to SIEM indicator lists.· SOC Shift lead responsible for leading and/or delegating all shift duties amongst analysts on duty. Provided a shift report at end of shift including verbal pass down of any issues that happened on shift that may need additional follow up by later shifts. Please see resume for full position duties.

Subject Matter Expert and SOC Lead working with team of 15 analysts and 5 engineers (remote) of varying skill levels and experience in an 24/7/365 SOC environment.

Monitored network traffic with ArcSight Enterprise Security Manager (ESM). Duties include Incident Response for Classified and Unclassified Spills (containment, eradication and recovery). Responsible for developing and implementing Cyber Intel capabilities. Utilized Intel sources including US CERT, I-Sight, DHS and HSDN for implementation of the latest APT Actor sets and Crime Indicators.

Member of Tier III Advanced Threat team whose primary focus is on Advanced Persistent Threat. Performed Daily Intel pulls on Government Classified network looking for new threats.

Performed in-depth analysis in support of Network Monitoring and Incident Response operations supporting multiple Cabinet-Level Federal Agencies. Member of a team of approximately thirty information assurance professionals working with Intrusion Detection System (IDS) software and hardware, analyzing IDS data, writing reports, briefing event details to leadership, and coordinating remediation with personnel throughout the globe.

Responsibilities include incident handling, incident response for both server farm and internal network.