Leads a team of application security professionals that coordinates with across all elements of the IT organization at all levels, including senior executives, to promote secure development practices.

Clarifies, mediates, and resolves military and civilian complaints of discrimination and sexual harassment. Assesses organizational human relation climates and provides senior leaders with information and tools needed to improve AF, Wing, and Unit mission effectiveness. Combats discriminatory practices through human relations training and education.• Supervises the deployment of workplace climates surveys for three military installations, and advisesleaders on strategies to address issues highlighted by the surveys• Oversees the overall compliance of the equality opportunity program by managing ~100 inspectable itemsand meeting annually with auditors from the AF Inspector General• Trains staff on the best practices for maintaining a healthy work climate free of harassment, bully, anddiscrimination

A member of a team who provides network defense for partners across the country, though threat detection, vulnerability scans, network monitoring and emulating attacks. Leads a cyber threat emulation team that employs current intelligence to simulate attacks from various adversaries. Key Duties• Detects and reports advanced persistent threats across the cyber terrain in support of USCYBERCOM's global mission• Conducts forensic analysis to thwart adversary action against mission partners• Conducts system tests to evaluate specifications and requirements for missions• Creates specialized programs and tools to augment the available tools• Reviews security policies and technical configurations as part of a comprehensive threat assessment• Applies risk mitigation methods to help prioritize network vulnerabilities• Performs community outreach to high school student to develop interest in the cyber security career field• Trains and mentors staff on how to employ penetration tools

Led a team of application security professionals with functions comprising continuous improvement for the software development lifecycle (SDLC) and directing critical initiatives to enhance the organizational security position.

Integral member of an application security team charged with continuously improving the software development life cycle, validating network controls, conducting risk analysis on vulnerabilities, and leading security initiatives to improve the organization's security posture.

Integral member of an application security team charged with continuously improving the software development life cycle, validating network controls, conducting risk analysis on vulnerabilities, and leading security initiatives to improve the organization's security posture.Improving SDLC• Manages the automated web application scan program to detect and resolve common software vulnerabilities, such as OWASP Top 10• Conducts internal web app pen tests• Started a new initiative to detect software vulnerabilities during the design phase of the SDLC using architecture risk analysis and threat models• Works with app support teams to resolve or risk accept software vulnerabilities, by doing root causeanalysis on apps and re-testing security issues• Advises project teams on the best practices for effectively implementing controls that provide a layered defense for appsValidate Network Controls• Responsible for designing, preparing internal communication and overseeing the execution of network tests, such as yearly external and internal network red team engagement• Spearheads efforts to enhance incident response processes and information security policies, by leading meetings on how to implement the recommendations from the penetration testsVulnerability Risk Analysis• Conducts risk analysis on software and network vulnerabilities discovered during scans and penetration tests to aid in the prioritization of effort during the remediation process• Meets with risk governance committee to communicate high and very high risks to senior leadership Monitoring Cloud Infrastructure• Led efforts to bring Shadow IT monitoring and cloud infrastructure monitoring to Comerica, as part of a two-year effort• Created documentation for managing these services and trained internal staff on how to use them• Serves as a SME for cloud monitoring and Shadow IT, and assists with responding deficiencies detected by monitoring services

A member of the leadership team for a group of intelligence analysts tasked with building products to assist leaders at the 180th Fighter Wing with making decisions.Key Duties• Researched, analyzed and disseminated information pertaining to threats to the base mission and staff• Created presentations to train base staff on technical systems related to their associated jobs• Documented policies, procedures and training information for the intelligence staff• Orally presented strategic information to wing commander and key leaders

Tell the story of military members. Write and edit news, features and commentaries for base publications, social media outlets, base websites and media releases. Design and edit newsletters and prepare layouts. Review speeches, news releases, and photographs for security clearance.

Key member of a system support team responsible for updating and maintaining a Windows computing environment with 6,000+ computers, 100,000+ users, and 300+ applications.Key Responsibilities• Led short-term and long-term projects that improve service delivery• Mentored and trained junior team members• Helped to define the best business policies, procedures and processes for the service• Collaborated with departments across U of M to develop best solutions for customers• Provided 24/7 coverage that facilitates the resolution of service outages• Assisted in investigation of computer security incidents• Train customers on deployment technologies and troubleshooting techniques• Created golden image for desktops and servers• Deployed software and settings using Active Directory, Group Policies and System Center ConfigurationManager• Supported Linux print servers• Maintained Windows virtual environment• Tested new hardware and drivers• Script automated processes, primarily using Windows PowerShell, Visual Basic and Perl• Monitored desktops and servers systems using baselines to detect compromises• Patch management for Windows servers and desktops• Packaged applications into custom installers