Red Team Technical Lead III & Project Manager

• Sep 2022 - Present

Security Engineer III

• Jan 2022 - Oct 2022

Offensive Security Engineer - Team Lead

• Oct 2018 - Dec 2021

* Managing and developing a team of three (3) security engineers in a fast-paced, dynamic environment to accomplish the mission and objectives of various levels of leadership; Allocating and adjusting individual workloads, based on changing priorities, to keep team members equally engaged and highly effective at their daily tasks. * Evaluating current adversarial tools, techniques and procedures (TTP) and what is being actively exploited in the wild from an Internet-facing (network boundary) perspective. * Providing remote threat assessments to enumerate vulnerabilities and exploitable flaws for customer service delivery points from a black box, external perspective without causing negative impact to the target organization(s) and their system(s). These assessments often result in a written report of findings with recommended remediations. * Validating customers' network attack surfaces, utilizing both open source and custom tools while identifying defensive capabilities within the customer's public-facing infrastructure. * Communicating, validating, assessing, and assisting in the remediation of security flaws and issues reported by the DoD Bug Bounty/Vulnerability Disclosure Program (VDP). * Developing and maintaining team documentation, including but not limited to TTPs, Standard Operating Procedures (SOPs), Lessons Learned and After-Action Reports (AAR). * Preparing technical assessment reports for system owners, cybersecurity personnel and system administrators and conducting formal briefings for effective communication to leadership. Show less

Cybersecurity Analyst

• Jun 2017 - Oct 2018

* Conducting vulnerability scanning and endpoint protection capability implementation and maintenance activities (HBSS & ACAS). * Scheduling, coordinating and conducting vulnerability scanning activities. * Conducting enterprise and system-specific vulnerability trend and associated root cause analysis. * Collecting and analyzing vulnerability scan activity lessons learned for potential process improvement. * Incorporating applicable lessons learned into current policies and procedures. * Monitoring and supporting corrective action or mitigation strategy implementation. Show less

Web Administrator & Graphic Designer

• Oct 2012 - Jun 2017