Helping Security Operators Innovate.Together- We are creating a Trustworthy Internet.https://csirtgadgets.comhttps://github.com/csirtgadgetshttps://alphahunt.io

Know More.

* Created services and helped grow the ISAC from 50 to over 550+ member institutions* Architected and launched the REN-ISAC's Security Event System (threat intelligence platform) using Amazon Web Services, enabling the REN-ISAC community to proactively share threat intelligence in real time.* Executed NSF Grant for development of next generation threat intel platform (SES)* Created active open-source community around open-source threat intelligence technologies* Evangelized threat intelligence sharing tools and protocols at various CSIRT based security conferences around the world* Architected and launched member passive DNS API with Python and Amazon Web Services* Architected and launched AWS Services within the REN-ISAC* Architected second generation member identity and authentication application with Rails and Amazon Web Serviceshttps://www.ren-isac.net/member-resources/SES.htmlhttps://github.com/csirtgadgets/bearded-avenger-deploymentkit/wiki

The CSIRT Gadgets Foundation is a non-profit organization dedicated to helping those who keep the Internet safe build tools.https://csirtgadgets.orghttp://csirtgadgets.org/artifacts -- papers, public talkshttps://github.com/csirtgadgets

* Architected and launched the Collective Intelligence Framework (python)* Architected csirtg-smrt platform for fetching and normalizing threat intel feeds (python)* Architected peer to peer (p2p) networking stack for DARPA ICAS program (C, python and ZeroMQ)* Implemented TLS security in ZeroMQ's ZYRE peer to peer protocol* Proposed ZeroMQ RFC 43, a protocol for secure beacon broadcast and discovery using ZYRE* Active ZeroMQ (CZMQ/ZYRE) contributor* Architected and launched CSIRTG Threat Publishing Platform using Rails and Amazon Web Services: https://csirtg.iohttps://csirtgadgets.comhttps://csirtg.iohttps://github.com/wesyoung

* Break down complex threat analysis, define and project risk assessments for management* Analyze complex security data, research, design and develop automated tools to identify security risks to the institution* Develop annual network security road-maps and budgets* Perform network forensic analysis on institutional compromises.* Enhance security event management function within the Network Operations Center (NOC)* Developed and instructed security classes for campus nodal administrators* Designed, Implemented and Maintain Network Core Intrusion Detection Infrastructure* Designed, Implemented HomeGrown SEM with direct feeds to Incident Tracking System (Remedy via ARSPerl)* Designed and implemented next generation SEM using ArcSight, RTIR and Remedy for next-generation security intelligence handling.* Designed Automatic Quarantine system for use within Network Registration System* Provide network forensic analysis for related incidents* Designed Intrusion Detection signature generation tool* Designed and Implemented ITIL Incident and Problem handling process within tel-com org* Managed Change Management Process within tel-com organization* Developed and implemented "High Impact" Incident response process for entire CIO Area* Serve on CIO area "Strategic Services Initiative" to implement executive level Incident, Change and Configuration Management processes across the organization* Member and Chair of the Internet2 Computer Security Incidents Working Group (CSI2)* Served on University-wide IT Security Advisory Council

* Redesigned internal AD Infrastructure / Email System* Re-designed online, incremental imaging backup system

* Developed and Implemented Network System Monitoring system (Nagios) for web development group. Systems included Microsoft web farm as well as clustered databases and print / file servers.* Provided help desk support for development group.

* Designed and implemented network IDS.* Performed migration from Novell 4.11 Architecture to Windows 2003 AD / Exchange Infrastructure (Much travel to regional offices required)* Designed and implemented centralized Symantec Anti-Virus infrastructure* Performed major ISP migration* Administration of CITRIX services* Administration of PIX firewall* Administration of AD Environment and DNS infrastructure

Cleaned residential [student] computers of malware infectionPoint of escalation for all unknown malware infections.