Principal Consultant - Strategic Advisory

• Jul 2022 - Present

Manager, Security and Infrastructure

• Nov 2019 - Jul 2022

-Managed IS and IT operations for a government contractor complying with NIST 800-53 Moderate and SSAE/SOC, advising on security-centric best practices for incident response -Facilitated an internal continued compliance program, working closely with internal teams and external auditors to manage the compliance lifecycle and ensure requirements for customers and contracts were met-Performed risk assessments and developed associated compensating internal controls-Hands-on security operations management

Senior Information Security Engineer

• Jan 2012 - Nov 2019

-Strategically aligned incident response practices with the MITRE ATT&CK matrix-Developed and optimized threat hunting capabilities utilizing Splunk and Sysmon-Architected and maintained organizational cloud security posture-Designed controls in order to secure customer and internal web applications

Information Security Engineer

• Jun 2010 - Jan 2012

-Reviewed and maintained security logs and alerts within Splunk to improve EDR activities-Maintained the organization’s infrastructure including remote access capabilities-Responsible for the continued monitoring and maintenance of the security for multiple web-based applications

Linux System Administrator

• Jan 2009 - Jun 2010

Intern

• Jun 2008 - Dec 2008

Speaker

• May 2018 - May 2018

Presented a talk on effective security monitoring and provided examples on what to monitor and how to monitor it. Presented a talk on effective security monitoring and provided examples on what to monitor and how to monitor it.

Speaker

• Apr 2018 - Apr 2018

Presented a talk on effective security monitoring and provided examples on what to monitor and how to monitor it. Presented a talk on effective security monitoring and provided examples on what to monitor and how to monitor it.

Speaker

• Apr 2017 - Apr 2017

Presented a talk on robust cyber defense for small enterprise organizations. Provided details on a secure framework to mitigate threats and defend against modern day attacks. Presented a talk on robust cyber defense for small enterprise organizations. Provided details on a secure framework to mitigate threats and defend against modern day attacks.