David S.

Develop policies supporting identity validation, access control, and continuous monitoring in a NOC environment Support visibility into user access and system interactions using enterprise monitoring tools Contribute to Zero Trust-aligned access models and identity-aware security controls

Built and supported an enterprise Identity Risk and Insider Threat Program Analyzed user behavior and access patterns to detect anomalous activity, privilege misuse, and data exfiltration risks Identified and mitigated high-risk exposure involving unauthorized use of external tools Aligned identity governance controls with NIST 800-53 Delivered executive briefings on identity-based threats and access risk

Conducted IAM assessments focused on RBAC, identity lifecycle management, and privileged access risks Identified access control gaps and recommended Zero Trust and identity governance improvements Advised clients on identity-centric cybersecurity frameworks

IT Consultant July 2016 – Present Managing projects obtaining data regarding customer service and logistical flow through surveys, interviews, questioning, and observations. Weighting measurement techniques and compiling data into business intelligence for decision-makers resulting in a 28% sales increase in 12 months. Presenting results of data collection to decision-makers, executives, and field associates. Used data analysis to increase sales, and guest services. Awarded for leading change management and recognized as one of the best regionally in process. Implemented field online ordering network operations systems to include hardware installation, testing, network trouble-shooting, process, and policy development. Mentored leaders to manage new processes and built-out to meet future needs who promoted executives and franchisees.

Senior analyst manager for a watch warning center. Lead a team to compile metadata from IP addresses to IP addresses outside the US measuring frequency and duration. Compiled data into pivot tables and presented intelligence to decision-makers. Managed project of the expansion of two government watchlist databases consisting of over 800 FBI cyber counterintelligence and counterterrorism cases.

Intelligence Analyst (Counterintelligence / Insider Threat) Investigated insider threats involving identity misuse and unauthorized access Produced intelligence reports on behavioral risk indicators and access anomalies Briefed senior leadership on threat mitigation strategies

As a detective with the Ocoee Police Department I was assigned to the Investigation or Economic Crime, Cyber Security Investigations, Confidence Schemes, Frauds Schemes, Identity Theft and wire fraud. I was a Field Training Officer and a Police Academy Instructor for recruit and advanced training.

Defensive Cybersecurity program complete with in-depth networking, Cloud, Windows, and Linux security courses that aided in the mastery of cyber-infrastructure technologies, incident response techniques, and digital forensic theories. Prepared for Network+, Security+, LPI, CCSK, CCNA, CCENT, SSCP, and CySA+ certifications.