Jonathan Echavarria Email & Phone Number

Tampa, Florida, United States

I figure out ways to make computers do weird things they don't typically do, involving both Artificial Intelligence and Cybersecurity

This role involves many cross-team and cross-domain interactions and involves a number of ad-hoc responsibilities. A non-exhaustive list of responsibilities include: - Managing and conducting periodic clandestine red team operations to help secure the organization- Conducting Security Research- Conducting Internal Training Sessions on a variety of security topics- Product Evangelism, including marketing coverage via blog posts, conference talks, etc- Designing architecture and creating proof-of-concepts of potential product offerings- Product ownership of customer facing, in-house applications. Responsibilities involve all phases of the lifecycle, including development- Assisting with incident response for high profile incidents, including investigation, adversary disruption, negotiations, malware analysis and reverse engineering, etc- Partnership and product evaluations- Security code and architecture reviews, including conducting periodic application security tests- Business enablement through cross functional work with teams such as data engineering, product teams, and business analytics- Aligning technological capabilities with overall business strategy- Integration of Machine Learning and Artificial Intelligence capabilities into core business strategy

Menlo Park, Ca

In this role I conducted red team operations against significantly hardened and technologically advanced environments. A selection of key accomplishments include:- Malware development- Rootkit development- Campaign/Operation development- Hands-on-keyboard offensive operations- Report creation- Conducting debriefs with leadership- Cross-functional work with a variety of teams- Conducting trainings

Tampa, Fl

A unique role that requires comfort and expertise with a wide range of skills, I was given the ability to capitalize on my range of experience, and provide a unique perspective to innovation efforts at the organization. Working closely with the development team and CTO, a highlight of my key duties include:• Assisting the devops process by providing a unique security perspective• Assist with system administration of a large cloud environment, with a heavy emphasis on automated management.• Creation of playbooks (scripts) for a widely leveraged automation platform for usage within a large cloud environment.• Assist with security review of code.• Assist with the creation of instructional materials.• Assist with development processes within the organization.• Perform market research.• Work closely with an AGILE development team.• Perform a variety of security research.• Provide support to other teams when needed.• Engage with the community.• Provide mentorship, training, coaching, and support.• Perform speaking engagements at industry conferences.• Other special projects and assignments as needed.

Tampa, Fl

In this role I have performed a number of duties related to Red Teaming, Security Engineering, & Research. A highlight of key duties include: • Perform long term red-team engagements with a focus on adversary emulation across all phases of the kill chain; maintaining a focus on stealth and advanced techniques currently in use within the threat landscape. • Research of tools, tactics and techniques of offensive actors. • Perform malware analysis of received samples to produce indicators of compromise, and if possible, determine attribution of the threat actors.• Development of exploits and security control bypasses for proprietary and commercial software in use within customer environments. • Architected, constructed, and maintained infrastructure for long-term command and control, phishing, OSINT, and other capabilities across multiple customers for use by Red Team Operators. • Performed a variety of security research centered around methods on how to detect cutting-edge offensive tactics, and how to successfully implement them within large and complex enterprise environments in an effective manner. • Lead instruction in implementing cutting-edge detection capabilities into customer environments.• Provided mentorship, training, coaching, and support.• Performed speaking engagements at industry conferences.

Tampa/St. Petersburg, Florida Area

In this role I performed a number of duties related to Penetration testing, Information Security engineering, systems administration, and research. A highlight of key duties and accomplishments include: • Performed a variety of network and web application penetration tests. • Architected, constructed and maintained a cutting edge information security lab used for running simulations to assist in training for offensive operations and content development. • Architected, constructed, and maintained infrastructure for managed service security operations center supporting multiple customers. • Performed installations and engineering of SIEM products for customers. • Architected a custom “SOC-in-a-box” solution that provided a NAC, SIEM and DLP product in one plug-and-play platform. • Architected, designed, and implemented a solution for performing automated threat intelligence collection. • Systems administration and technical support for a mixed environment with Active Directory supporting approximately 80 people using, at different points, Small Business Server, Google Apps, and Office 365, to include administration of network infrastructure. • Performed a variety of security researching around detection of offensive capabilities, and malware analysis.