Tim S. Email & Phone Number

Everett, Washington, US

Cambridge, Massachusetts, US

Working with the technical pre and post-sales teams to help translate findings and product capabilities into value for our prospects and customers. Focusing on cross-functionally with PM, Engineering, Development, and Marketing to help align and improve product capabilities to drive value.

Everett, Washington, US

Los Angeles, CA, US

Tampa, Florida, US

Supported multiple high profile customers as part of a strong and growing MSSP. Provide threat hunting, splunk and SOAR content development, detection engineering content, threat intel support, and a variety of other services to customers across multiple industry sectors.Work with experts from internal departments like engineering, content dev, analysis.

Austin, Texas, US

• Help guide the creation of Oracle’s new cloud-based enterprise Security Monitoring & Analytics platform (cloud based SIEM with detection capabilities), bringing strategic and tactical security experience to the.
• Significant involvement in crafting the product’s mid and long-term roadmap. Ensuring that elements we are designing in the short term serve as building blocks for the more complex long-term goals, while still.
• Write use cases and design documents for new features and workflow enhancements, offering guidance throughout the development process.
• Influence multiple development scrum teams: log ingestion and parsing, data format and enrichment, UI / UX, query language, machine learning, detection engine, backend functionality, and in some cases QA testing.
• Directly responsible for a significant percentage of the products current data language, as well as core data taxonomy elements.
• Developed a large percentage of the product’s OOTB content: dashboards, detection related content, and ML models.

Mountain View, California, US

Perform analysis and research on a variety of cyber-security threats to generate high quality threat intelligence products. Involved in tracking both APT and cyber-crime threat actors, uncovering new malware and tactics, campaign discovery and mapping, and the development of multiple data driven threat reports and other innovative intelligence reporting..

San Jose, California, US

Perform tier 3 analysis and assist in high profile incident analysis on site for US-CERT. Provide reach-back capabilities to McAfee for US-CERT when needed. Work on special projects like methodology development, whitepapers, and training sessions to assist the other analysts. Train and mentor junior analysts.

Farnborough, Hampshire, GB

Monitor network traffic, BlueCoat Proxies, ISA Servers, traffic loggers, firewalls and IDS sensors. Document network traffic anomalies and prepare incident reports for action by the Computer Incident Response Team (CIRT). Research current attacks and vulnerabilities & model new signatures to detect them.

Reston, VA, US

Perform administration and maintenance of the reserve center’s Exchange and file server clusters, including patching, backups, and cluster maintenance. Responsible for the administration of virtual and traditional servers in a complex network environment with remote sites in Alaska, Guam, Saipan, Samoa and Maui.

Provide information assurance (IA) technical support and compliance verification services to DoD elements throughout Iraq, Afghanistan and Kuwait. Briefed commanders, staff, and technical elements on the results of our network scans and security inspections, in addition to providing suggestions for increasing security. Taught the Computer Defense.