Bryan B.

I oversee the Digital Forensics and Incident Response program, which involves leading a team of top-tier analysts with hundreds of years of combined experience in investigating, containing, and remediating security incidents across the enterprise. Beyond managing incident response workflows from initial detection to containment and eradication, the role incudes pushing the boundaries of our response plans and procedures, and collaborating with other teams (e.g., technology, legal, compliance, risk, etc) to ensure effective incident handling.

The Sr. Incident Response Manager executes the Incident Response Lifecycle to drive threat remediation and identify strategic countermeasures improving future defenses. This role enhances the workflow and processes driving incident response and mitigation efforts across the enterprise. As the Sr. Manager, I provide leadership and guidance to some of the best and brightest in the industry as well as to advance the defensive capabilities of the Threat Management Center (TMC) and its subsequent ability to defend the Verizon Enterprise.

This role was responsible for leading and participating in threat actor based investigations, developing new detection methodologies, and providing subject matter expert support to incident response and monitoring functions. The primary focus was to detect, disrupt and neutralize threat actors, malware, and non-malware based attacks to this organization's Managed Security service working with over several other organizations. Roles and Responsibilities include: • Served as technical leader of the Incident Response Team and participate in customer security incident response efforts. • Designed and built custom tools for investigations, hunting, and research • Hunted for and identified threat actor groups and their techniques, tools and processes • Reviewed alerts for any false positive alerts and modify alerts as needed • Provided host-based forensic analysis of key artifacts collected such as the $MFT, Registry, Event Logs, Amcache, etc. • SME on industry evolution while researching new and current concepts related to malware, vulnerabilities and advanced threat detection mechanisms • Remained informed on trends and issues in the security industry, including current and emerging technologies and industry best practices

Participated in team supporting global & regional security requirements, and conducted independent research to identify cybersecurity threats and vulnerabilities, responded to security incidents and alerts, produced intelligence reports, and provided context about the evolving threat landscape. I also supported the vulnerability management program by assisting in the design of a threat model for Nielsen and it’s assets.

•Managed and SME of Jabil's Automated Incident Response System (AIRS) - Hexadite. •Use and assisted with maintenance of Web Proxy for internet content filtering and malware prevention. •Led a small team (3 people) as the senior threat engineer. •Leveraged SIEMs, IDS\IPS, Web Proxy, AIRS, etc to locate malicious use inside and outside of our organization. •Leveraged multiple resources for threat intelligence. •Collected forensics on endpoint machines manually by targeting key directories. •Ran and maintain forensic capabilities such as FTK, Magnet, and EnCase. •Collected forensic images of memory on endpoints. •Collaborated across teams (Legal, HR, Ops, Dev teams, etc) to build best practices, documentation, processes, and policies. •Performed basic reverse engineering of malware as needed •Created and updated centralized IOC (Indicators of Compromise) repository •Designed, drafted, and finalized security playbooks

● Performed assessments on internal and external Web Applications, Services, and 3rd Party Vendors ● Reviewed and Approve\Deny Single and Multi-Platform IT Infrastructure, Architecture, and\or Compliance items ● Worked with Development (Dev) teams to create or use templated Risk Assessment ● Helped with “War Gaming” high profile or sensitive projects ● Assisted with the design and writing of corporate security standards to include but not limited to: Security in Agile Standards, Waterfall SDLC Security Standards, Device Hardening Standards, etc ● Worked with Dev teams on using and implementing security tools into their processes such as Static\Dynamic Code Analysis, Open Source package review, etc ● Performed security reviews and penetration testing (PenTesting) on internally developed applications ● Worked with Dev teams on remediating flaws and bugs found in tests ● Maintained an active seat on the Change Advisory Board and the DevOps SME Project Team ● Collaborated with multiple security teams such as Threat and Intelligence, Architecture, Compliance, and Licensing

● Managed and mentored a small team of soldiers in expanding thier intelligence goals and capabilties ● Regularly handled and disseminated classified information in accordance with DoD regulations. ● Created one of the first joint intelligence and operations records and communication reports in our battalion ● Conducted a wide range of information gather techniques to include data, human, and terrain analysis ● Deployed to multiple combat zones to include Iraq, Qatar and Kuwait ● Made numerous briefings to service members ranging from enlisted soldiers to senior commissioned officers. ● Standaradized the use of computers for analytical tools, database access, and networking in the battalion

To meet an increasing demand for cybersecurity professionals, the Bachelor of Science in Cybersecurity and Information Assurance (BSCSIA) degree program prepares IT professionals to apply knowledge and experience in vulnerability management, risk management, incident response, and cyber defense to safeguard data. Courses deliver proven methods for information security in the topics of penetration testing, network security, cloud security, scripting, intrusion detection, digital forensics, security operations, project management, cryptography, and Identity and Access Management (IAM) to prevent, detect, and mitigate cyberattacks. This program features nationally recognized, high demand certifications in the field of cybersecurity.