* Design enterprise network and security solutions for a variety of corporate, educational, and public-sector clients. Act as the project manager for the life-cycle of each project. * Advise and support various clients in the administration and maintenance of their network infrastructure. * Design and deploy intrusion detection systems. Perform vulnerability assessments and penetration testing. Design and deploy methods of mitigation and risk reduction. * Conduct incident response to security incidents including containment and recovery. Show less

As part of executive management, successfully established Information Technology as a strategic business partner to all corporate units and external partners. Ensured that all IT products and services were aligned with the business goals, objectives, and corporate culture. Directed all facets of the day-to-day corporate operations. This involved operation and capacity planning, building new infrastructure and systems, as well as process development and management. Chartered to build an information security organization with overall responsibility for technology risk management, information protection, and security assurance of the business operations. Responsible for all aspects of information security, physical security, and business continuity planning. Show less

* Lead all divisions in the various phases of the group's process and operation. This includes * honeypot design and deployment, malware analysis, discovery, and investigation of * underground, and dark web activity, network flow, and traffic analysis, disseminating * cyber threat information, and coordinating incident response. * Performed detailed studies of malware infection, botnet analysis, and network traffic * analysis. Develop and implement various detection and defense systems. * Developed strategic alliances with outside groups and organizations to coordinate data * exchange, malicious activity observation and research, detection and defense strategies, * and process and system integration. Participated in many closed working groups * investigating specific threats and malicious activity. * Conducted training and workshops for various groups and organizations, including Law * Enforcement Organizations

* Conducted forensic analysis of systems where intrusions or compromises may have occurred. Provided root cause analysis and impact assessments. Make recommendations to assist prevention of similar incidents. * Performed threat analysis pertaining to incidents, malware, attempted exploits, etc. * Implemented, maintained and analyzed results from intrusion detection systems and other tools to detect compromises and ensure the integrity of the GWU network.

* Performed investigations of various computer crimes, particularly specializing in malware,network, and intrusion forensic investigations. Performed data mining and use of open- source intelligence (OSINT) for investigative purposes and to correlate forensic findings. * Planned, conducted, and managed forensic examinations of digital evidence related to casesinvestigated by BCPO and other law enforcement agencies. Served as a senior technical advisor regarding digital forensics and computer crime investigative analysis techniques. * Worked with investigators and prosecutors to assist in the preparation and execution of search warrants, investigative information, and cases for court purposes. * Trained and presented to corporations, Law Enforcement agencies, and task forces on digital forensics, computer crime investigations, and cybercrime threats. * Declared as an Expert Witness in Digital Computer Forensics: 2008 Show less

* Part of the team responsible for assessing and protecting Seyfarth Shaw’s technology infrastructure. * Perform or supervise advanced threat hunting/analysis and incident response pertaining to exploits, malware, and vulnerabilities. * Assist in designing and/or modifying security defense and detection architectures in response to the changing threat landscape. * Perform or supervise vulnerability testing, risk analysis and security assessments. Identify, prioritize and communicate current and emerging security threats. Show less

* Architected and designed forensic and network monitoring capabilities. Provided senior * oversight of intrusion detection and incident response efforts. * Performed threat analysis and incident response pertaining to exploits, malware, * vulnerabilities, and potential breaches. Regularly consulted with other groups and schools * regarding security “best practices”, and observed threats and vulnerabilities. * Assessed and secured cloud and on­-premise architectures and services. Developed security * reports, security recommendations, policies, and procedures. Developed protections * against newly discovered vulnerabilities, including creation and deployment of Snort/Suricata * signatures that were also shared with and adopted by security companies. * Designed advanced intrusion detection capabilities to ensure the integrity of the GW network. * Mentored Network Security Engineers and Computer Forensic Engineers on developing * detection and analysis capabilities

* Threat research and intelligence analysis with emphasis on malware analysis, criminal * infrastructure tracking, the underground economy and cybercrime. * Active member of various Working Groups focusing on specific malware threats, targeted * attacks, and malicious networks. Prepare detailed analysis reports of specific threats. * Post findings and reports via the DeepEnd Research public blog. * Participate in the discovery, investigation, and intelligence reporting of a variety of * underground and dark web forums. Obtained free and paid versions of malware and * exploit kits for analysis. * Participate in various cyberthreat and "hacktivism" exploit, and human intelligence * collection and reporting efforts. * Deployed extensive honeynet architectures to create deceptive environments to capture * and analyze cyber adversary behavior.