We provide IT Staff Augmentation Services!

Countermeasure Analyst Resume

4.00/5 (Submit Your Rating)

SUMMARY:

  • Highly talented, qualified, and motivated Information Systems Manager & Professional with knowledge and experience in managing, organizing, and implementing information systems & software.
  • Has experience in customer service on multiple help desks as well as conducting briefings for customers.
  • 11 years military experience; proven leadership, management, team building, and process improvement
  • Directly or indirectly supervised 30+ personnel at 6 state - side/deployed bases; Oversaw job performance; assigned tasks/duties; wrote performance reports; managed budget and conducted resource planning activities
  • Problem solver; results oriented; hard charger; team player; committed to task completion; flexible, excellent communication & writing skills; works well with others; persistent; diligent; adaptable to change
  • Reviewed and modified formal security policies and procedures with an emphasis on aligning to industry best practices and regulatory compliance for the Executive Office of the President Security Operations Center

CORE COMPETENCIES:

Program Management: Oversaw the configuration and maintenance of the hardware and software on over 100 switches and 30 crypto devices that provided command, control, communications, and computer support to 11K customers with a 99.9% uptime rate.

Information Technology Specialist: Installed radar site switch/secure phone for 5M ATC project that enabled 12K missions/50K sq mile air picture that was sent to Balad AB. Created base classified network monitoring tool; enabled problem isolation in 30 minutes versus 2 hours. Networked 1.2K workstations giving access to 16 US/Iraqi units.

Technical Proficiencies:

Network protocols: TCP/UDP, SNMP, DHCP, Telnet/SSH, TLS/SSL, DNS, FTP, HTTP/HTTPS, NTP,TACACS/RADIUS, IPsec, SMTP

Routing & Switching: OSPF, RIPv1 &2, EIGRP, NAT, VLANS, BGPSome creation of ACLs

Network Analysis Tools: Ping, Wireshark, SiLK(a CERT / Carnegie Mellon University developed network flow tool), Remedy, Jims, NS Lookup, Orion/SolarWinds, CISCO works, HP OpenView, What's Up Gold

Hardware: Cisco Routers & Switches, Sidewinder FW (limited), KG175's, Desktops, Servers, Laptops

Additional Platforms: Arcsight, Splunk, Sourcefire (V 4/5), Arbor, SQL/Oracle, Securify

PROFESSIONAL EXPERIENCE:

Confidential

Countermeasure Analyst

Responsibilities:

  • Reviewed intel to create custom rules; tested rules and deployed rules
  • Creates dashboards/channels in Arcsight for security analysts to monitor
  • Updated VRT/TALOS rule by pushing new rules to sensors
  • Trained 12 analysts on rule creation process; and Sourcefire break down of rules
  • Use ArcSight to monitor data gathered from enterprise level sensor suites. Information presented is a near realtime view of the current network security status, allowing for rapid investigation and response to emerging threats. Tools used to provide data to ArcSight are:
  • Sourcefire signature based intrusion detection system
  • Securify anomaly based intrusion detection system
  • Arbor Networks DDoS protection services
  • McAfee Host Based Security System
  • Noesis packet capture database system
  • NetWitness data packet evaluation
  • Wireshark data packet examination
  • SiLK, a CERT / Carnegie Mellon University developed network flow tool
  • Report significant findings to subscribing customers for further investigation and mitigation at the local network level
  • Provide first level investigation to assist in the attribution of tactics and procedures to specific threat actors
  • Recommend Sourcefire signature updates to the Countermeasures team, refining and streamlining the information presented to the real time analysts
  • Selected to participate on a team of Information Security Analysts, Countermeasure Specialists and Cyber Intelligence Analysts tasked to augment the Security Operations Center (SOC) of the Executive Office of the President.
  • Reviewed security tool capabilities and optimized sensors and tools to identify and alert on abnormal network traffic patterns or known threats
  • Discovered network vulnerabilities and risk factors, then recommended and implemented network hardening measures
  • Developed several new dashboards in security log repository that correlates traffic from multiple sources, allowing analysts to trace network events at the firewall and beyond for user or asset identification and behavior

Confidential

Server Administrator, Event Manager

Responsibilities:

  • Installed/configured hardware/software for 22 network servers hosting AMC specific applications
  • Maintained oversight of $337M Enterprise Network for situational awareness of Confidential AMC/A6 and senior staff
  • Tracked and coordinated scheduled maintenance of mobility planning systems and consolidated e-mail services
  • Managed power requirement; identified unused devices; resolved power requirement for $29K server install
  • Conducted A6 classified briefs; expertly delivered 108 reports--presented vital comm to senior leaders

Confidential

Deployable Data Network Supervisor

Responsibilities:

  • Led 7 person team in setup/configuration of deployed network in support of Confidential ; established voice/data communication services for 400 customers--vital to countless life-saving operations
  • Installed 4K feet of cable, provided Internet/Email to 5 deployed squadrons over a 2 mile service matrix
  • Integrated What's up Gold network monitoring tool to deployed suites; tracked 50 devices
  • Updated logon banners for 58 Cisco routers/switch devices; met security mandate
  • Identified faulty fiber optic ports on voice module, activated 48 data drops during unit exercise
  • Enhanced Predator unit C2; added net address space--enabled 2000% troop surge--supported 750 sorties

Confidential

Information Manager

Responsibilities:

  • Rapidly established/managed centralized help-desk for 900+ customers for inaugural Exercise Confidential
  • Managed 2k+ users on User Manager/Active Directory—added/deleted users/troubleshot account problems
  • Single-handedly tracked 200 suspense's and processed 30+ performance reports...zero missed deadlines
  • Automated synchronization of flight trends analysis data with unit’s report—saved 4 man-hours per month

We'd love your feedback!