Experience

CDI LLC

• United States
• Information Technology & Services
• 500 - 600 Employee

• Senior Penetration Tester

  • Jan 2022 - Present



ICSA Labs, an independent division of Verizon

• Malcode Analyst



ICSA Labs, an independent division of Verizon

• United States
• Computer and Network Security
• 1 - 100 Employee

• Lead analyst for WAF and ATD (APT). Senior analyst for Network Firewalls and AV.

  • Sep 2006 - Jan 2022

  Deployment, configuration, management and testing of different technologies for the following vendors: - Network Firewalls: CheckPoint, SonicWALL, Fortinet, Huawei, WatchGuard, F5 Networks, ZyXEL, and others - WAF: Fortinet, Brocade, Radware, F5, Citrix, Imperva, A10 Networks, Barracuda and others - AV: SonicWALL, Fortinet, Huawei, Symantec, Kaspersky, Panda, AVG, Microsoft, Sophos, and others - ATD (APT): Cylance, Damballa, Sentinel, Confer, Fortinet and… Show more Deployment, configuration, management and testing of different technologies for the following vendors: - Network Firewalls: CheckPoint, SonicWALL, Fortinet, Huawei, WatchGuard, F5 Networks, ZyXEL, and others - WAF: Fortinet, Brocade, Radware, F5, Citrix, Imperva, A10 Networks, Barracuda and others - AV: SonicWALL, Fortinet, Huawei, Symantec, Kaspersky, Panda, AVG, Microsoft, Sophos, and others - ATD (APT): Cylance, Damballa, Sentinel, Confer, Fortinet and others Program Development: Developed and improved existing testing methodologies, tools, techniques, test beds, and infrastructures for Network Firewalls, Web Application Firewalls (WAF), AV, and ATD (APT). Also provided extensive training to analysts for Network Firewalls and AV programs. Quality Management System: Received the appropriate training in ISO 9001 / ISO 17025. Followed the processes as required by both ISO certifications. Participated in internal ISO compliance audits for the Quality Management System and test procedures. General Skills: Infrastructure: In-depth knowledge of general networking and TCP/IP model, Linux and Windows (AD) server administration, Installation, configuration and management of virtual solutions: VMware ESXi, Hyper-V, Virtualbox , Routing and Switching, SSL/TLS, Various SIEM solutions, DRBL/Clonezilla imaging tools Vulnerability Scanning and Assessment: Acunetix WVS, Open VAS, Nessus, NMAP, Scapy, Various SIEM solutions Scripting/Light Automation: Python, PowerShell, Bash Packet analysis: Wireshark, Tcpdump Light Malware Analysis: PC surgeon, Sysinternals, OllyDebug, Ghex, Various hashing tools, Various SIEM solutions Show less Deployment, configuration, management and testing of different technologies for the following vendors: - Network Firewalls: CheckPoint, SonicWALL, Fortinet, Huawei, WatchGuard, F5 Networks, ZyXEL, and others - WAF: Fortinet, Brocade, Radware, F5, Citrix, Imperva, A10 Networks, Barracuda and others - AV: SonicWALL, Fortinet, Huawei, Symantec, Kaspersky, Panda, AVG, Microsoft, Sophos, and others - ATD (APT): Cylance, Damballa, Sentinel, Confer, Fortinet and… Show more Deployment, configuration, management and testing of different technologies for the following vendors: - Network Firewalls: CheckPoint, SonicWALL, Fortinet, Huawei, WatchGuard, F5 Networks, ZyXEL, and others - WAF: Fortinet, Brocade, Radware, F5, Citrix, Imperva, A10 Networks, Barracuda and others - AV: SonicWALL, Fortinet, Huawei, Symantec, Kaspersky, Panda, AVG, Microsoft, Sophos, and others - ATD (APT): Cylance, Damballa, Sentinel, Confer, Fortinet and others Program Development: Developed and improved existing testing methodologies, tools, techniques, test beds, and infrastructures for Network Firewalls, Web Application Firewalls (WAF), AV, and ATD (APT). Also provided extensive training to analysts for Network Firewalls and AV programs. Quality Management System: Received the appropriate training in ISO 9001 / ISO 17025. Followed the processes as required by both ISO certifications. Participated in internal ISO compliance audits for the Quality Management System and test procedures. General Skills: Infrastructure: In-depth knowledge of general networking and TCP/IP model, Linux and Windows (AD) server administration, Installation, configuration and management of virtual solutions: VMware ESXi, Hyper-V, Virtualbox , Routing and Switching, SSL/TLS, Various SIEM solutions, DRBL/Clonezilla imaging tools Vulnerability Scanning and Assessment: Acunetix WVS, Open VAS, Nessus, NMAP, Scapy, Various SIEM solutions Scripting/Light Automation: Python, PowerShell, Bash Packet analysis: Wireshark, Tcpdump Light Malware Analysis: PC surgeon, Sysinternals, OllyDebug, Ghex, Various hashing tools, Various SIEM solutions Show less