Experience

• 

  EY

  • Partner/Principal

    • Jul 2021 - Present

  • Senior Manager

    • Jun 2015 - Jul 2021

    - Led Co-Source SOC engagements, new capability development, delivery of advanced SOC engagements such as Incident Response (IR) actions, threat hunting and purple teaming, and security orchestration & automated response (SOAR) deployments and consulting.- Oversaw service quality, staffing, and training for multifunction global service delivery teams operating 24x7 in EMEA, APAC, and Americas regions for several Fortune 500 clients across multiple industry sectors.- Advised leadership on SOC and Incident Readiness capabilities, SOC/IR market trends, EY’s technology alliances, and diversity & inclusion initiatives for neurodiversity and military veterans in cybersecurity.

• 

  Resolution1 Security

  • Greater Detroit Area

  • Director of Incident Response

    • Dec 2014 - May 2015
    • Greater Detroit Area

    • Led and managed a team of six highly-experienced Incident Response (IR) personnel providing proactive IR consulting, on-demand breach response, and operationalization services for the Resolution1 Cybersecurity platform to Fortune 500 and small/medium businesses. ulting and expertise on cyber threat intelligence operationalization, IR processes and strategy, and security technology gap assessments.• Provided technical mentoring and coaching to team to monitor and motivate, encourage capability innovation and revenue generation, and deliver successful outcomes from various client engagements.

• 

  GE

  • Greater Detroit Area

  • Manager, Advanced Threats Team

    • Nov 2013 - Dec 2014
    • Greater Detroit Area

    • Led and managed a team of six highly-skilled employees performing expert-level network- and host-based incident response for skilled adversary incidents. Protected global networks generating $150 billion in annual revenue while supporting over 400 thousand employees in 170 countries.• Provided strategic consulting and guidance to all GE lines of business and internal IT functions to plan for, train, and execute IR on cloud computing and mobile/BYOD environments.• On-call coach and mentor to GE-CIRT incident handlers (L3), incident analysts (L2), coordinators, and business response leads during large-scale IR events.

• 

  GE Aviation

  • United States
  • Aviation and Aerospace Component Manufacturing
  • 700 & Above Employee

  • Security Analyst - Team Leader

    • Apr 2013 - Oct 2013

    • Created company-wide incident containment and artifact collection initiatives. Consolidated systems while automating processes, cut investigation times by 65%, eliminated 80% of system costs.• On-call company-wide business response coordinator and analyst mentor during ten large-scale IR events.

  • Collect Lead & Incident Handler

    • Mar 2011 - Mar 2013

    • Drove incident response (IR) activities for Advanced Persistent Threat (APT) intrusions on networks supporting $40 billion in revenue and 120,000 users around the world.• Developed new collection scripts in response to new threats and collection capabilities; integrated solutions to isolate hosts from adversaries while allowing access for remote forensics collection. Cut overall incident response time by 25% and containment time by 99% with zero financial expenditure.• On-call incident handler for four GE lines of business. Rapidly coordinated investigations, planned, executed, and communicated complex multi-business response actions during large-scale IR events.

• 

  333d Training Squadron

  • Lead, Cyber Core Networks

    • Sep 2009 - Feb 2011

    • Led team of 23 cross-functional experts, and 10 contract staff in the development and implementation of courseware as well as associated training system requirements. • Delivered demanding 23-week, 920-hour classified training program for 400 students four months ahead of schedule and under the $11,600,000 budget. • Developed the Air Force’s merit-based assignment selection system for new cyber operations officers later approved by Commander, Air Force Space Command and briefed to Congress. • Ranked #1 of 23 junior officers in selectively manned unit, highest new instructor evaluation & subject matter tests.

• 

  33d Network Warfare Squadron (AFCERT)

  • Assistant Director of Operations

    • Aug 2008 - Sep 2009

    • Led Air Force Computer Emergency Response Team (AFCERT) operations. • Personally selected by Commander to lead the Squadron’s computer network defense operations conducted by three flights and 180 officers, enlisted and contractors, Squadron’s primary interface to external organizations. • Worked with program managers to operationalize new AF capabilities and systems. • Ranked #1 of 30 junior officers in the Air Force’s only defensive cyber operations group.

  • Flt/CC, Air Force Intrusion Prevention & Response Flight

    • Feb 2007 - Aug 2008

    • Led team of 33 uniquely skilled professionals in the daily conduct of intrusion prevention and incident response. • Responded to over 120 adversary intrusions into AF networks. Performed network and malware forensic analysis and reporting, intelligence gathering and system recovery. • Teamed with commercial groups, law enforcement and national organizations to prevent computer viruses and worms from spreading across the Internet. • Ranked #2 of 22 Captains in Air Force’s only consolidated network operations group.

• 

  JFCC-NW

  • Mission Commander & Operations Planner

    • Dec 2008 - Jun 2009

    • Tasked by the Commander to operationalize a fledgling cyber attack capability and support organization. • Developed, coordinated and led Joint Cyber Attack Team operations and rehearsals in support of future missions.• Authored checklists and processes, Concept of Operations, job qualification and training plans for incoming. personnel. Reviewed DOD incident response statements for the 2009 White House Cyber Policy Review. • Ranked #1 of 27 junior officers in a combined coalition staff during the course of deployment.

• 

  67th Network Warfare Group

  • Executive Officer

    • Oct 2006 - Feb 2007

    • Executive liaison for the commander of the Air Force’s offensive cyber unit responsible for over 500 employees. • Tracked and coordinated for the commander the status of all vital tasks performed by 13 subordinate units.• Provided technical expertise on AF cyber warfare weapons systems to Commander and Deputy Commander.• Ranked Top 10% of junior officers in Air Force’s only offensive cyber operations group.

• 

  33d Information Operations Squadron

  • Offensive IO Support Project Manager

    • Aug 2005 - Oct 2006

    • Responsible for all aspects of operational support for a 220-person information operations (IO) squadron with annual budget of $18,000,000 directly supporting Air Force, Joint and Allied cyberspace operations. • Anticipated, developed, and documented current and future technical, operational, and intelligence requirements while evaluating cost, schedule and performance. • Identified, researched, and integrated leading-edge technology to increase and Squadron’s warfare capabilities and mission areas while ensuring successful future growth.• Ranked #1 of 11 Communications & Information officers in year group.

• 

  460th Mission Support Group

  • Executive Officer

    • Aug 2004 - Aug 2005

    • Executive liaison for the commander of Mission Support responsible for over 600 employees. • Led a 5-person office staff directing day-to-day office scheduling and planning for an $80,000,000 annual budget. • Acted as liaison between commander and civilian community for public affairs issues. • Ranked #1 of 16 Lieutenants in Mission Support Group.

• 

  460th Space Communications Squadron

  • Deputy Base Communications Planner

    • Aug 2003 - Aug 2004

    • Led 11 project managers supporting communications project and planning for projects totaling $250,000,000. • Squadron’s lead project manager for all large budget (over $1,000,000), short turn-around (90 days or less) projects. • Reviewed all statements of work and contracts for technical and financial merit. • Ranked #1 of 7 junior officers in Communications Squadron.

  • Base Circuit Manager and Deputy Base Information Systems Flight Commander

    • Aug 2002 - Aug 2003

    • Responsible for over 130 network and system administrators operating the base computer networks. • Set network usage, e-mail, storage, and security policy for 2,200 users. • Oversaw the operations of over 150 point-to-point and long haul circuits from sub-T1 to OC-192 bandwidth levels • Ensured routers, switches, servers and networked devices were fully functioning by managing a 24/7 operation.