Todd Ryan H. Email & Phone Number

Seattle, Wa, Us

Accelerating customer and partner business outcomes as a result of innovative usage of the AWS platform.

Incident Response and Business Continuity Plan Development and Delivery – Work directly with multiple clients to develop comprehensive incident response and business continuity plans that meet or exceed identified cybersecurity frameworks (NIST, ISO) and fiduciary compliance and governance obligations (PCI, HIPAA, GDPR). Incident Response Lifecycle Management – assisting customers who have identified security breaches with investigation, containment, eradication, remediation, notification determination, and post-incident learning/reporting efforts. Utilized FTK to collect and analyze forensic evidence, with additional image analysis done in Linux.Cybersecurity Risk Analysis and Reporting – Utilize F-Secure and Fortinet security tools to collect and analyze vulnerability information and generate risk data based on likelihood (CVSS, compensating controls, attack technique, threat sophistication, etc.) and overall impact to the organization.

Allentown, Pennsylvania, Us

Incident Response Analyst – Accountable for 24/7 information security incident escalations from level 3 security operations center (SOC) analysts. Responsible for analysis and classification of threats, as well as execution of appropriate IR Playbook to ensure organizational protection and continuity. Utilizing security tools such as QRadar SIEM, McAfee antivirus, DNS Analyzer, Office365 headers, and built in Windows utilities; conduct inquiries and investigations into possible security violations. Investigation and collaboration tracking via ServiceNow. Author and deliver time-sensitive incident reporting to leadership teams while managing overall technical responses of various stakeholders and technical teams.Incident Response Program Manager – Develop, document, and refine SOC processes to reduce overall incident escalations. Collect and report comprehensive incident response status to senior leadership identifying short- and long-term trends. Manage incident response lifecycle failures to correct program and improve overall organizational readiness. Author and review comprehensive Incident Response Plan updates in line with industry standards and best practices (including GDPR). Identify and manage long-term incident response program lessons learned to improve overall organizational security posture through systematic, documented improvements.

Schaumburg, Il, Us

Security Tool Implementation and MSSP Monitoring – sizing, deployment, monitoring, and analysis of tools such as FireEye, Palo Alto, Carbon Black, and Proofpoint. Tools were utilized concurrently to assess if any significant security violations were taking place within an organization. Analysis included validation of alerts, threat attribution, endpoint investigation, and recommended actions.Incident Response Lifecycle management – full incident response life cycle management including reporting and lessons learned. Forensic collection and analysis using FTK Imager, Encase version 7, Internet Evidence Finder (IEF), and hands-on interactive investigation and response techniques (Process Explorer, Process Monitor, CMD, WMI, PSExec, PowerShell, etc.)

Mclean, Va, Us

Computer Network Exploitation Analyst - Analyze network infrastructures, develop infiltration and data exfil strategies, author and present client ready written deliverables for projects/ networks, advise client offices on best practices for achieving set intelligence goals, and technical support liaison for partners at three different intelligence agencies. Worked primarily as technical liaison between TOPI office and TAO.

Arlington, Virginia, Us

Honorably discharged after 6-year military career. Achieved rank of Staff Sergeant (SSG – E6) and was awarded the opportunity to serve as squad leader for eleven (11) lower enlisted soldiers. Developed, planned, and delivered multiple tactical and technical training exercises for groups of up to fifty (50) soldiers.Served as a Digital Network Intelligence Analyst for a Cryptologic Support Team, in support of Operation Iraqi Freedom, in 2009. Released numerous DNI and tactical reports, acted as collection manager for our localized SIGINT collection assets, and filled many Requests for Information (RFI).

Digital Network Analysis, Network Reconnaissance And Intelligence Gathering

35N30D6 Job Qualification, Digital Network Intelligence Analysis

Computer Systems Networking And Telecommunications

Computer Science