Jack Riley Email & Phone Number

Bedford, Massachusetts, Us

Senior Incident Response and Security Consultant responsible for:- Directing and Leading Incident Response Engagements of varying complexity in both on-prem and cloud environments- Performing exploratory data analysis over large disparate datasets for the purposes of Threat Hunting, Detection Engineering, and Security Research- Development of content and tooling for IR engagement operations, orchistration, threat hunting, and investigative methodology implementation- Train and mentor team members and clients on at-scale threat hunting, exploratory data analysis, and anomaly detection

Managed continuous operations of a team of eight (8) Incident Response Analysts, with tasks including:- Engagement scoping and quoting- Assigning analysts to incoming engagements based on capability and workload within a utilization-based assignment schema- Strategic and operational engagement management, orchestration, and client/legal communications- Provided technical and communication guidance to team members in tactical roles - Reviews and Individual Development PlanningAlso responsible for technical guidance, individual technical development and training, and analytical capability and tooling development for assigned Incident Response (IR) team members. Trained analysts in:- Operating System (Windows, Linux, MacOS, VMWare) Internals, Operations, Integrations, Functional Structure, and Associated Analysis Methods (Continuous Applied Instruction)- Modern Incident Response Dataset Analytics (Continuous Applied Instruction)- Adaptive Strategic, Operational, and Tactical Incident Response Methodologies (Formal Curriculum)- Cross-Dataset Investigative Correlation Methods and Approaches (Formal Curriculum)- Non-Standard and Adaptive Forensic Dataset Extraction/Processing Methods (Continuous Applied Instruction)- Programming as a Dataset-Agnostic, Domain-Specific Query Language (Formal Curriculum)- Identifying, Correlating, and Incorporating Traditional and Behavioral Threat Intelligence into Actionable Incident Response and Investigative Methods (Continuous Applied Instruction)Developed initial version of distributed triage dataset processing, analysis, and engagement monitoring system (and associated processes and procedures) to perform the following:- Increase analysis volume by a factor of 10- Expand analysis capabilities to additional datasets- Increase analytical resolution and complexity- Provide real-time integration of intelligence between personnel- Maintain or decrease time required for actionable analysis results

Herndon, Va, Us

As Incident Response Operations Lead, Wes oversees and directs all Incident Response and Threat Assessment Operations conducted by GPS-DFIR, with duties including directing Tactical, Operational, and Strategic considerations for IR operations, directing and developing tools, techniques, and procedures used by GPS-DFIR analysts, working closely with the GPS-DFIR Intelligence Lead to maintain and enrich a collaborative and cyclical actionable Threat Intelligence base, researching and engineering state-of-the-practice/state-of-the-art analytical solutions and methods to further threat hunting and incident response capabilities, and leading and/or conducing threat hunting and incident response analysis and advisory consultancy services.Wes' research interests include: Incident Response/Hunting under Resource/Dataset Constraints, Applications of Distributed Systems, Graph Theory, Data Science, Dataset Integrations to Incident Response/Hunting, Feature Engineering and Machine Learning, Network Traffic and Protocol Analysis Methods, and Application of Multidisciplinary Studies in Incident Response/Hunting

Burlington, Massachusetts, Us

Threat Hunting; Incident Response; Windows, Linux, Mac OS, and Network Forensics

Burlington, Massachusetts, Us

Jack (Wes) Riley is an Advisory Practice Consultant for the Incident Response / Discovery(IR/D) Practice at RSA. In this capacity, Wes is responsible for delivering holistic incidentresponse services using state of the art host and network based technologies. Using thesetechnologies, combined with advanced methodologies, Wes is able to assist clientsobtain situational awareness and rapidly identify threats as part of tactical response to intrusionsinvolving sophisticated adversaries that target intellectual property and other critically sensitivedata. In addition, Wes performs threat research and develops content / techniques that can beused by clients to identify compromise and mitigate risk.

Washington, Dc, Us

Duties include Incident Handling and Response, Digital Forensics, Penetration Testing, Malware and Incident Analysis, Secure Coding, Enterprise Defense, and Linux Administration. Primarily serving as an Incident Handler/Intrusion Analyst protecting a heterogeneous, dynamic, distributed enterprise global network.

Clinton, Mississippi, Us

Work as a consultant for penetration testing and vulnerability assessment/analysis. Duties include:- Social Engineering- Physical Security Testing- Technical-based penetration testing - Determination of vulnerabilities at client sites and assessment/analysis of those vulnerabilities.

Secure, monitor, and consult on security issues regarding the Department of Defense High Performance Computing Modernization Program and the U.S. Army Corps of Engineers.- Built, configured, secured, and administered RHEL version 5 and 6 Linux systems.- Built, configured, secured, and administered Ubuntu version 8 through 10 Linux systems.- Built, configured, secured, and administered multiple authentication mechanism servers.- Evaluated and advised on best security practices for a site-wide infrastructure, as well as 3 High-Performance Computing systems.

Us

Administered all UNIX/LINUX systems, as well as lent support to administration of Windows Server systems. Conducted security reviews of contract company systems.

Mississippi State, Ms, Us

Conducted research into digital forensics and computer security for National Forensics Training Center at Mississippi State University. Research included data hiding, memory forensics, evidence collection, and methods of constructing exploit code.

Ms, Computer Science

Bs, Software Engineering