Will Baxter

Empowering organizations to proactively defend against cyber threats by leveraging actionable threat intelligence. I work closely with customers to align cybersecurity strategies, operationalize threat intelligence, and enhance their overall security posture. Focused on protecting critical infrastructure, addressing supply chain vulnerabilities, and driving collaboration across industry and government to combat evolving cyber risks.

• Mentored and developed technology leaders on organizational security roadmap and objectives. • Developed technology roadmaps that outlined and mapped organizational security objectives to industry security standards • Worked with key customers to enhance the level of service and security provided across the client base • Collaborated with industry partners and business experts to align IT Roadmaps and Strategies with business needs

• Following an organizational merger that doubled the size of our IT capabilities and staff by adding developers and data analytics capabilities, resumed a senior leadership role focused on driving our Infrastructure & Security capabilities into the cloud • Built, mentored and led a team of people capable of executing an aggressive cloud vision • Consolidated IT assets and services for 6 disparate organizations into a single set of shared services • Developed cloud first strategy to speed adoption of key security objectives • Planned and rolled out Office 365 ecosystem to 6 customer organizations, including our own • Created an IT operations, security, applications and support capability that serviced ~1,200 customers spanning ~50 states • Collaborated with industry partners and business experts to align IT Roadmaps and Strategies with business needs • Worked with key customers to enhance the level of service and security provided across the client base • Leveraged vendor relationships to speed delivery and strengthen service offerings providing critical IT Support • Developed baseline for IT spend and developed financial and performance measures to track progression

• Led the creation and development of Enterprise Cloud, Identity and Access Management and Security Visions, Strategies & Roadmaps • Worked to align key stakeholders with business value and prioritization for each strategy • Led the security components of a cloud innovation effort that involved moving a large web application environment to an Amazon AWS environment • Redeveloped and streamlined the vendor and IT risk assessment processes • Coordinated with domain architects and business experts across Information Security to translate key strategic objectives into actionable and governable roadmaps and designs

• Played the lead role in designing and implementing an overall network traffic analysis program for a network with 80,000+ clients and servers • Engineered and deployed 3 customized Bro-IDS/Network Security Monitor clusters • Assisted in deploying and implementing NetWitness to 3 primary datacenters and 2 remote sites • Assisted in creating Incident Handling procedures for a new Security Operations Center • Trained and mentored junior network security analyst in many facets of cyber security • Created a program for monitoring and applying open source threat intelligence information • Assisted in refining and improving the Vulnerability Management program

• Led and mentored a team of Network Security Analysts in the IG Computer Network Defense Group • Collaborated with community partners to combat the threats and techniques used by adversaries • Designed and maintained the intrusion detection systems, firewalls, mail gateways, proxies and other network devices • Developed and tuned custom Bro-IDS policies for increased automated detection • Conducted analysis of malicious files (i.e. pdf, jar, exe, etc) • Developed and implemented incident response procedures for the information security division

• Supervised and mentored 10+ members of the incident handling and analysis staff • Developed and validated incident response plans to address cyber threats and vulnerabilities • Monitored, analyzed, and responded to security events using security event management tools • Analyzed netflow data to identify compromised or mis-configured systems or devices • Supported the daily coordination and remediation of information security related incidents with senior management, performing suppliers, and business units • Developed scripts and tools in both Python and Perl that assist in automating analysis • Analyzed various Internet protocols to detect anomalous activity • Performed technical analysis and correlation of netflow, firewall, PCAP and other log data • Researched, developed and maintained proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities and exploits

• Monitored IDS system activity at U.S. Diplomatic facilities overseas • Drafted technical intelligence reviews for major events such as the Olympic Games and World Cup • Produced maps and imagery depicting facilities and their proximity to major transportation infrastructure

• Provided armed internal security for U.S. Embassies • Safeguarded American diplomats, classified material, and U.S. Government property

• Operated all flight computer systems • Led over 400 hours of flight missions to over 10 countries across the Pacific Rim • Participated and assisted in planning numerous flight operations