Will Torres Email & Phone Number

Baltimore

- Primary escalation point for cyber security incidents for the entire corporation, working either alone or with other team members throughout the entire incident handling lifecycle- Provide systems architecture expertise for both preventative and remediation actions to other information technology teams and application owners- Produced concise, informative, well-written reports related to a range of topics, including vulnerabilities, projects, and incident situation and post mortem reports- Created and participated in many cyber incident response drills that included technical staff and managers from many different functional areas and business units, including Legal, IT Operations, and Power Generation, Transmission, and Delivery teams- Primary and only team member that actively reviews and updates the intelligence signatures for the intrusion detection/prevention system, including developing automated scripts to find new signatures, and to report event statistics and priority event notifications

Baltimore

- Continued to deploy advanced technologies to support a more mature cyber operations group- Led the effort to identify, architect, and deploy an industry-leading SIEM system to aggregate multiple network and host logs to improve cyber security monitoring and incident response, greatly enhancing the ability of the team to quickly find forensic details- Led the effort to design and deploy a custom cyber security incident tracking system that greatly enhanced how the team documents cyber security occurrences, incidents, tasks, and advanced metrics

Formerly Constellation Energy

- Triaged cyber security incidents based on alerts from network and host detection systems, and worked with the other team members throughout the incident handling lifecycle- Architected and deployed new technologies to enhance incident response and detection capabilities, including developing new intelligence indicators (i.e. IDS and AV signatures)- Wrote and managed procedural documentation for North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) versions two and three compliance requirements; also, served as the main contact for my group’s systems and responsibilities within the compliance program- Served as the single administrator of the entire corporation’s AV technology, and singlehandedly led a successful migration of two disparate AV environments from unsupported to current versions

- Identified client needs, recommended appropriate solutions, and executed implementations of various client, workstation, and network software and hardware- Successfully led high level projects with multiple teams across several international locations- Achieved and maintained extremely high level of customer satisfaction regarding competency and efficiency of work, as well as communication with client contacts- Successfully mentored and assisted in the furthering of knowledge of fellow team members including creating and distributing documentation of technical resolutions- Established myself as point of escalation for difficult problems

Education record

Gcih, Gdat, Gcti, Giac, Gcpn