Cyber Threat Hunter• Proactively identify and investigate potential security threats using threat intelligence and security analytics tools.• Developed and implemented custom threat hunting queries and analytics to detect and mitigate emerging threats.• Utilized SIEM solutions (Splunk) to analyze large datasets and correlate security events for anomaly detection.Digital Forensics & Incident Response Analyst• Developed a streamlined process and accompanying documentation to efficiently and securely transfer client data from their AWS S3 bucket to the Commercial DFIR team's AWS account.• Implemented a process for configuring an ELK stack to effectively ingest Windows Event Logs, enhancing Incident Response (IR) investigations.Application Monitoring & Response Analyst• Provided essential support for Splunk detection and investigation by thoroughly examining Web Application Firewall (WAF) alerts. Analyzed network traffic to identify Indicators of Compromise (IOCs) and other malicious activities.Incident Response Analyst - Level II• Conducted in-depth analysis of potential Business Email Compromise phishing/malware campaigns using advanced tools such as Splunk, ServiceNow, Cisco Secure Malware Analytics (Threat Grid), Cisco Umbrella, and Authentic8 Silo.

• Proactively monitored, identified, and analyzed complex internal and external threats using Splunk, addressing issues such as targeted attacks and unauthorized access to mitigate risks to IT systems.• Conducted investigations into network hosts/endpoints for malicious activity using McAfee ePO and Tanium to contribute to containment, remediation, and recovery from attacks.• Executed Privileged Access Management functions using CA PAM.

• Provided IT administrative support to over 1,000 users, addressing hardware and software requests through telephone, ticketing system, and remote tools.• Identified, evaluated, and prioritized customer problems, ensuring timely resolution and appropriate handling of inquiries and complaints.• Contributed to Asset Management tasks by tracking, sanitizing, and disposing of computing equipment in a systematic manner.

• Detected and addressed root causes of compliance failures, crafting and executing corrective action plans to establish robust contract-wide internal controls.• Fostered collaboration with multiple departments to ensure comprehensive contract compliance.

• Led intricate, comprehensive character investigations, encompassing suitability, eligibility, loyalty, and overall security-related assessments for security clearance investigations at the Defense Counterintelligence and Security Agency (DCSA).• Conducted extensive research and investigations on provided or field-developed leads, ensuring a thorough presentation of all relevant information for investigations.• Effectively scheduled and managed an expanding and adaptable workload, consistently maintaining high-quality work across a diverse range of cases.• Authored detailed reports and assessments, upholding stringent standards through comprehensive reviews of information gathered during interviews.

• Provided training to internal customers on Business Continuity/Disaster Recovery plans, practices, and procedures through tabletop exercises, fostering a comprehensive understanding.• Conducted research on legacy data/systems to pinpoint and rectify gaps in organizational knowledge, effectively mitigating Shadow IT risks.• Collaborated with various business units to identify high-impact/priority processes and applications, proactively preparing for potential incidents.

• Examined over 1,000 system-generated alerts from a Suspicious Activity Monitoring System, identifying potential matches to Politically Exposed Persons (PEPs), organized crime groups, and terrorist organizations on both internal and external watch lists.• Safeguarded compliance with federal regulations, specifically the Bank Secrecy Act and PATRIOT Act, effectively mitigating legal, regulatory, and reputational risks.• Conducted thorough research on customers and counterparties using tools such as Dow Jones, LexisNexis, CreditBrowser, and public information sources. Analyzed customer information, including negative news articles, to ensure a comprehensive understanding of associated risks.

• Collaborated with cross-functional teams to establish an exception process for Business Continuity contract language, enhancing clarity and efficiency.• Formulated a comprehensive matrix in Microsoft Excel, categorizing vendors based on Request for Proposal (RFP) questions. This strategic approach facilitated a thorough analysis of third-party risks and criticality.• Documented organizational changes within the Fusion Framework System, contributing to robust Change Management processes. Ensured accurate recording of changes across seven business functions spanning three departments.