Information Security Analyst

This role is an Information Security Analyst with Imply Data.

Senior Security Automation Engineer

This role was a Senior Security Automation Developer with Pfizer's Global Information Security Team.

Responsibilities Included:

• Engineering solutions to ensure compliance with data loss prevention policies

• Compliance driven collection of mobile application data sent within the APAC region; this project required Python bindings to C libraries, Splunk, Docker, Zookeeper, and Elastic

• Administering a Security Orchestration, Automation, and Response (SOAR) platform

• Providing automation support to incident response, threat intelligence, and insider threat teams

• Conducting code reviews

• Modernizing legacy infrastructure & engineering practices

• Assisting management and mentoring team members

Owner & Lead Developer

As the owner and lead developer, these roles included managing business affairs, marketing, and creating:

• A Yara based endpoint security product that alerted clients about files containing sensitive data & measured the length of exposure over time

• A GPS, WiFi & Cellular based mapping service

• A charitable, employment based advertising platform tailored to the Republic of the Philippines

Security Research Analyst

This role was a Security Research Analyst on Arbor's Security Engineering & Response Team (ASERT).

Responsibilities included:

• Reverse engineering malware, malware classification

• Contributing to the company's malware analysis infrastructure development

• Malware sinkhole development

• Product feed contributions

• Researching DDoS related threats & developing mitigations

• Producing research & intelligence products for customers

• Briefing media & responding to law enforcement inquiries

• Point-of-contact for an ISAC

• Understanding threat-actor TTPs & providing attribution to campaigns

• Contributing to working groups & the security community

• Researching new malware families, criminal, and state-sponsored campaigns

• Presenting at private conferences

Incident Responder

This role was working as an Incident Responder in the Information Security Department at Southern Illinois University Carbondale.

Responsibilities Included:

• Identifying, containing, and monitoring the remediation of malware infections

• Working with departments to implement best security practices

• Developing a DNS-based sensor network to identify malware traffic

• Creating infrastructure to detect malware traffic signatures from third-party feeds

• Developing a passive DNS database

• Forensic analysis of compromised devices

• Reverse engineering malware

• Identity management & compliance audits

• Responding to law enforcement inquiries

• Contributing to the TDL working group

• Developing an endpoint security product

Research Contract

This position involved contributing to the development of a communication paradigm for unmanned aerial vehicles under a research contract.

Palm Pilot Application Development

This work involved contributing to the development of a Palm Pilot application used by clinical researchers at Southern Illinois University. The application enabled researchers to monitor and record behavioral interactions between members of at-risk communities. This software was used to support a long-standing study at the university.

Employee

This role consisted of repairing and assmbling computers, removing malware infections, selling cellular phones, assisting customers, and installing satellite dishes in the Mendota, Illinois & surrounding area.

PunkeyPOS Analysis

• New PunkeyPOS Malware Variant Targeting Windows POS Terminals

SecurityWeek Podcast with Ryan Naraine

• Discussing the Soraya Point-of-Sale Malware

Zeus Gameover Analysis

• Zeus Gameover Back from the Dead

• Infection Rate from Zeus Variant Grows 1879%

• Zeus Gameover Variant is Back

• Gameover Zeus Variant Begins Exponential Botnet Build

Point-of-Sale Malware Analysis

• Criminals Seeking More Buyers with All-In-One Malware

• After Neiman Marcus, Target Breaches, Experts Speak to Bull’s-eye on Retailers’ Backs

• Soraya Malware Targets Payment Card Data on POS Devices & Home Computers

• POS Malware on the Rise in Cyber Underground

• Retail Breaches Spread. Point of Sale Malware a Suspect.

Izz ad-Din al-Qassam Cyber Fighters Analysis

• FBI: DDoS Botnet Has Been Modified

Point-of-Sale Malware Analysis

• Credit Card Fraud Comes of Age with Advances in Point-Of-Sale Botnets