Mandiant Red Team

Mandiant Red Team

Coalfire Federal Labs. Penetration testing for commercial and government clients.- Web application, API penetration testing- Network penetration testing- Purple teaming- Tailored social engineering campaigns- Reviewing source code- Developing engagement-specific tools and proof-of-concept code- Building and maintaining cloud infrastructure to support offensive engagements- Leading engagements, creating reports and conducting out-brief meetings- Performing peer-reviews for colleagues’ reports within the Labs group- Providing remediation and mitigation guidance to clients- Supporting best practices, FedRAMP, PCI, FISMA and other requirements

Developed the information security practice within ATS. Supported DC-area commercial and nonprofit clients. Solely responsible for penetration testing engagements.- Web application, web API and network penetration testing- Scoped engagements and guided threat modeling- Creative OSINT, attack surface and vulnerability discovery- Developed engagement-specific tools and proof-of-concept code- Created reporting templates, authored findings and narratives and conducted out-brief meetingsAdditionally, worked to build and support SOC and security engineering services.- Implemented and customized SIEM systems for ATS and client organizations- Developed code for custom event collection, enrichment and ingestion (Python, PowerShell)- Developed SIEM API wrappers for integration efforts (Python)- Performed incident response and root cause analysis- Developed indicators for observed attack campaigns against client industries- Implemented SSO with MFA in Azure across sanctioned SaaS services- Mentored junior staff

- Broadly Involved in the engineering and operations of multi-tenant hosting infrastructure, composed of physical, virtual (VMware) and public cloud (Azure) resources. - Built, secured and maintained heterogenous application stacks for clients.- Configured rules for resource monitoring, alarms and automated response- Coordinated and executed complex application migrations with internal and client stakeholders- Served as an on-call technical escalation resource for Hosting and NOC staff

- Built and maintained physical and virtual hosting infrastructure- Supported diverse technology stacks on multi-tenant infrastructure- Configured resource monitoring and alerting- Implemented NetFlow collection for hosting traffic analysis- Served in on-call rotation

Involved in the design, implementation and maintenance of growing corporate and web hosting infrastructure.

Provided seasonal support to tax professionals using the ProSeries software suite.

Served in a village near Gao, Mali. Learned and communicated in the local language, Songhai. Worked with the community on agriculture and sanitation development projects.