Evan Wagner Email & Phone Number

Assembled tournament winning hacker team.In 2022 I created a 14 module Incident Response coursecalled CYBR260 for Coastline Colleges of California with agrant from the NSA. This was quite an undertaking with theheavy level of curriculum, labs and virtual machine images Ihad to develop.In 2023 I created HackNWA Computer Party as an afterSp4rkCon event and attained two diamond level sponsors todonate the venue, stage, sound systems, food, drink,printed circuit board badges and entertainment. The eventalso had a Computer Party area where individuals couldcomplete ICS challenges, solder printed circuit boardbadges, learn about assembly coding, network flowsvisibility and more.Members of my team and I worked together to gain theesoteric knowledge required to produce custom printedcircuit boards via fabricators. We achieved this after severalmonths of research and have been manufacturing themsince 2020 producing thousands of boards which we haveused to teach soldering and electronics to audiences atBSides in Kansas City, Thotcon in Chicago, DEFCON in Vegas, to Bentonville,Orlando and more. Hundreds have learned to solder as aresult.Produced a variety of educational training materials fromone hour presentations to eight hour trainings and a livefire range focused on cyber security subjects which havebeen provided live from Montreal to Haiti, Miami to SanFrancisco and many places in between.

Louisville, Co, Us

Reported directly to CISO, performed IR and coordinated exercises with teams, identified gaps in security coverage, wrote detections, tested detections, API Integrations, wrote ansible playbooks, serverless cloud functions and triggers for automation and enrichment pipelines.Assisted with service reliability architecture and testing to improve overall availability and resilience to attacks. Performed investigations on potential service impacting non-security incidents in order to provide a greater level of detail as to what was the cause. Performed daily audit and compliance regime requirements as well as other duties

Bentonville, Arkansas, Us

International Incident Response for 50 major companies globally. With my vast experience I was immediately able to effectively perform across many different types ofenvironments and technology solutions.Managed many types of cases from small to public breach notice.I was the top specialist in memory forensics achieving results even in low telemetry environments using my techniques.Recognized by Red Team and won their challenge coin.Attributed activity down to the individual red team operator more than once.Selected as one of five out of nearly 1000 individuals in WMT infosec to participate in nation state level Cyber STX beta event the very first time it was provided to non-military participants (SANS TBT-570). I was designated by my team as the malware reverse engineer and provided highly detailed information on the techniques used by the threat actors and every action that they took. The level of detail I provided helped WMT to be elected the lead team amongst half a dozen teams from major organizations. This across three different major threat actors provided the validation I was seeking to confirm my own capabilities to handle APT actor cases.Performed exploit validation, wrote training that was signed off by inter-department leadership to become official, programmed on projects and much more.Was selected as Speaker and “Hacker Liaison” for Walmart’s security conference Sp4rkCon

Davie, Florida, Us

Attained “Key Role” Gaming License after passing extensive backgroundcheck.Performed Daily/Weekly Compliance Reporting for six Casino Properties(>10,000 employees, 3500 Workstations, 34 Reports per day)Enterprise-wide vulnerability management ownership. Ascertained security riskfor machines across six physical properties using diverse selection of tools whilesimultaneously identifying issues with system and network configuration whichimpeded patching and sweeps. Provided high level of support and education tothe enterprise / casino properties as well as custom remediation scripts/MOPs and GPOpolicies.Wrote custom tools using Python, PowerShell/WMI, Node.js, MySQL,MongoDB and others to integrate with multiple security tool APIs. Producedcustom interfaces and dashboards.Built automated deployment systems for installing software and performingactions on endpoints remotely via Powershell and WMI (Nopsexec/WinRM/WSMan).Greatly improved incident response capabilities by introducing the conceptof Netflow and Physical Memory for investigation, built menu driven artifact collection toolkits togather RAM dumps, procmon data and other system artifacts. I Suggested andimplemented DNS query logging across the enterprise for $0.Performed Static analysis, Dynamic Analysis, Sandboxing, myriad of PhysicalMemory analysis using Volatility Framework, yara scans, Network threathunting, log2timeline, Encase and more.Built custom rules and alerts in SIEM to find anomalous behaviorReputation settings in AVPerformed vendor software security assessments and succeeded multiple times in hacking and breaking through vendor solutions.software solutions and providing alternative solutions to save the company money. For example saving them $3000/mo in just one case.

Cambridge, Ma, Us

Originally hired by Prolexic Technologies in 2013. Right away I created anautomated system to parse information from 35,000+ line configurationdirectives per network device that correlated back to customer subnet prefixeswithout having human intervention. This helped improve identification ofnetworks under attack as well as tracking aggregate bandwidth consumption fordisplay in customer facing portal.Maintained and developed variety of software solutions for Security Operations Center(SOC).Selected to go to Cambridge for the first annual Akamai Tech Summit.Participated in “Smackdown” tournament where I came up with an originalproduct idea and build it out in two days. I chose two members from my team toassist me with my idea and it won 2nd place in the tournament. The product ideawas related to device/configuration management.Contributed to (Built all initial demos that got signoff from upper management,provided configuration data requirements, templating engine and more for an 8month project taking a dozen developers) on automating the deployment of thecomplex Prolexic Routed protection services. This was imperative for Akamaisince purchasing Prolexic in Feb 2014.Technologies used: PHP, Perl, NodeJS, lodash, Bower, Grunt, Angular,MySQL, Oracle, AMQP, IOS-XRWorked in strong SDLC with PCI-DSS compliance effort

Developed custom Content Delivery Network/CRM/CMS software and user interfaces allowing SEO companies to utilize marketing enhancement features improving customer search engine rankings. The complex interface allows SEO companies to resell the service utilizing white labeling.

Fort Myers, Florida, Us

Dynamic member of the messaging engineering team responsible for maintaining hosted and turn-key SMS, MMS, CMAS, Database and OS environments. Maintained application functionality for over 60 second and third tier cellular carriers in the USA and abroad. Carriers included Metro PCS and Cellular One,Work consisted of creating and maintaining Linux environments for various services to run on; creating and maintaining database, user accounts, replication and initial data sets. Ensured end-to-end message flow testing for intra and inter-carrier MMS and SMS as well as CMAS message flow and debugging with FEMA. Created custom support applications allowing the support team to easily perform certain tasks. I created one such application that saved over 20 hours of work per subpoena request. Performed on-site maintenance at INTEROP data center as well as flying out to perform customer data center deployments and upgrades involving dozens of servers. Many times I was required to load and configure OS and service software.

Because of my MS SQL Server experience I was hired as lead developer for their MSP data integration tool.I created a dynamic ODBC configuration tool in PHP allowing customers to login and configure connections to two remote databases and a mechanism to pull down the required data from remote MS SQL servers to local MySQL databases.I facilitated the recruitment of two developers and through my mentorship, they quickly began making breakthroughs in projects.During this time, I was selected to assist at “Startup Miami “ an entrepreneurial event where people come together to pitch ideas for programs. Working in groups these entrepreneurs decide which projects they want to work on. I collaborated with these movers and shakers while mentoring one of my protégés from Decipher Labs. We worked through the night, (a 16 hour day), coding their program and they took 2nd place the next day!

Us

Performed development tasks such as fixes/updates and creating new modules for their EMR app using PHP/MySQL/JavaScript/Smarty. I also worked on the infrastructure such as the phone system, fax to e-mail gateways, web, database, storage, e-mail servers and many other tasks I was asked to perform.Implemented new TWAIN scanner device to control, compression, and transmission mechanism which allowed client end users to upload scanned documents from TWAIN compatible devices to the web server for storage.Implemented ‘memcached’ for session and constant handling among the web servers. As soon as this was implemented users stopped complaining about being booted out of system.Compiled HAProxy 1.4 which is now their new load balancer. HAProxy combined with tproxy module in Linux allows for transparent SSL layer 4 TCP traffic to be balanced via least connection or other algorithms.Implemented DCM4CHEE PACS server for DICOM image storage and transmission.

OpenBSD: Installed and configured core router connected to 100mbps Comcast Fiber internet connection. BGP neighboring Comcast and a Global crossing internet 5mbps connection in down town Fort Myers.VOIP: Installed, configured and interopted SIP with Global Crossings, Verizon Business and Cisco Call Manager integration into Asterisk. Deployment included Linux Virtual Machines and hosts running Fedora Core, Arch Linux, Heartbeat2 XML IP and service resource failover, MySQL database for CDR and configuration, rsync backup system, control panel integration for easy management, modified SIP messages for Verizon interop and provisioning CISCO 7960 phones via TFTP.Hosting: Installed and configured Apache for Virtual Hosting, Postfix with database virtual backend with SSL IMAP, SMTP and Web Access. FTP accounts are also database driven and chroot the users to their web folder. The Web/FTP, Mail and MySQL databases were three different virtual machines with MySQL GRANT 'user'@'ip' for the different connections to the database server from the linux virtual machines. Multiple CentOS Virtual Machines running PowerDNS and MySQL with Replication.Programming: PHP/MySQL web development, configuration, customization, compilation and installation of many Open Source programs.

Fort Myers, Florida, Us

AIX: Responsible for maintaining IBM PowerPC server with Fiber Channel storage system running Medical Manager software.Databases/Programming: Responsible for availability, security and maintenance of 120GB+ SQL Server Electronic Medical Record database. Found and reported vulnerability in vendor EMR software. Also maintained other SQL Server 2000/2005 and MySQL databases. Created disk barcode labeling and check in/out system for DICOM patient study CDs using PHP, MySQL, XMLHttpRequest and JavaScript. VB Macros to reduce form calculation time for Human Resources and added a job posting app to the website for them. Earned Microsoft SQL Server Administration Certificate.DICOM: Took initiative to research and build PACS DICOM transmission and storage system with viewers for Web, Windows, Linux and OSX. System was demonstrated and used but not fully implemented across network because of loss of desire to hire radiology doctor. System at the time spec'd out custom with redundant servers and Coraid AOE storage to store ~25,000 patient studies @ 300MB average per study. Entire system came out to $20,000 beating all other estimates by at least $60,000.Webmaster: Responsible for flcancer.com website, eoc.flcancer.com (remote hosting) and SSL Certificate for Outlook Web Access. Created new database driven website using PHP, MySQL, JavaScript, Gmaps API and ensured compatibility across browsers. Created eoc.flcancer.com for employees to use during times of disaster. Linux: Responsible for 6TB Fiber Channel connected EMC Clarion file server initially running RedHat Linux 2.4 Kernel I reloaded it with Gentoo 2.6 Kernel after the 2.4 kernel began to panic and crash. The samba config integrated via LDAP into active directory for authentication and stored all scanned documents for the company. Also responsible for SpamAssassin server. Setup SNMP mibs aggregation testing for network devices as well. Tested many Linux apps for potential deployment.

Initially hired to develop PHP scripts for a network of websites. Developed solutions by providing hardware and software enabling designers to work more effectively. Upgraded their antiquated method of file sharing by replacing their Windows XP file server with a dual Opteron autonomous Linux server carrying 1.2TB of storage capacity. Upgraded the network to Gigabit increasing tenfold download and upload speeds. Provided new inter-office Ethernet cables allowing designers, marketing specialists and 3D artists to work seamlessly. Management adopted my suggestion of using a dedicated server over virtual hosting. This simple improvement simultaneously saved the business money and increased their potential for expansion. I created CMS extensions for their site and a Work flow CRM software that allows them to track clients, shipping, invoices, inventory and message each other. Designed and developed a bar code extension for the inventory to allow them to print and scan bar codes.

Us

Solved interconnectivity malfunction between the company's SunDialer auto dialer program and user client software.Updated their custom Intranet software to be compatible with the latest versions of PHP and MySQL. Wrote software that allows importation of the most current data into the dialer program. This helps employees to work more securely and efficiently.In one week was able to recover 99.8% of failed HD data using dd_rescue. Had C++ programmer on site to write MyISAM Binary extraction tool based on DB scheme to recover database.

Conway, Ar, Us

Worked under general direction of Director of Web Development. Assisted with development of UCA website. Created PHP and MySQL applications for a diverse amount of projects. Also created website designs, banners, image maps, t-shirt design and other media using Macromedia Dreamweaver, Adobe Photoshop, Macromedia Fireworks and other development programs. Assumed lead responsibility in database integration, and computer, server and network maintenance. Coordinated work assignments for student workers and provided technical and procedural instruction for faculty, staff and students. Analyzed technical tasks, determined their relative importance, set deadlines and completed projects as necessary.

I initially volunteered to help in their "online" department at the train station in Little Rock where Bill Clinton ran his presidential campaign from but it turned into pay work a few days later due to the technical demands they had. Created databases and programs for promotional campaigns and customer relation information. Also helped setup and configure database server.

Worked part time ( 30 hours per week ). Created and maintained a series of 7 websites partnering with ad company L90 to publish advertisements. The flagship website, ‘WebmastersLand.com was featured in .NET magazine, a British computer magazine.Managed Red Hat Linux server running business and customer service software. Server configuring included HTTP, SMTP, MySQL, Email and FTP. Provided clients with graphics, content management systems, website design and advice.