Resume

• Design and deploy hyperautomated security playbooks in Torq SOAR, reducing manual triage and cutting alert fatigue for the SOC team
• Monitor and triage endpoint and network activity using CrowdStrike, Microsoft Defender, and SentinelOne (EDR), IBM QRadar, Splunk, and Elastic Security (SIEM), and ExtraHop (NDR) to detect and contain malicious execution
• Author threat reports on emerging threats mapped to MITRE ATT&CK and ATLAS, contributing to UltraViolet’s Threat Advisory and resiliency initiatives
• Participate in purple team exercises to validate and expand detection coverage across MITRE ATT&CK and ATLAS techniques
• Lead 16 analysts through investigations of key findings using the OSCAR methodology (Obtain, Strategize, Collect, Analyze, Report)
• Develop an AI SOC investigation agent that enriches alerts, validates IOCs with confidence levels, maps activity to MITRE ATT&CK, and drafts audit-ready incident reports for analyst review
• Develop an AI threat hunting agent that converts threat intelligence (malware families, campaigns, TTPs) into targeted CrowdStrike Falcon hunt queries and standardized, client-ready threat hunt reports

• Configured, deployed, and maintained computing resources for ~400 faculty and staff across 6 academic departments
• Managed the School of Public Health’s database and computing equipment with zero availability-impacting incidents
• Supported AV installations in School of Public Health classrooms, labs, and conference rooms
• Tracked and resolved service requests and projects in Jira, handling 250+ tickets/week

• Analyzed security standards including CIS Controls, CMMC, NIST SP 800-171, and NIST CSF, translating technical requirements into business-focused guidance
• Led development of Edwards’ enterprise vulnerability assessment and penetration testing methodologies to align with industry standards
• Performed vulnerability scanning with Kaseya VulScan and remediated findings on affected hosts
• Delivered phishing-simulation and security awareness training using BullPhish ID

• Trained and mentored 100+ students in cybersecurity concepts
• Broke down complex security topics into clear, accessible explanations for learners at all levels
• Prepared students for industry certifications including CompTIA Security+

• Built AWS Lambda functions and managed EC2 instances, working across AWS, Azure, and Google Cloud
• Wrote Bash and Python scripts to automate CIS Benchmark hardening for the company’s product, saving 100+ hours of manual hardening work and eliminating the need for a paid hardening solution
• Automated software workflows using Git-based tooling

• Reviewed beta cloud courses for future Cloud Operations and Cloud Security students
• Wrote reports evaluating each course’s content and effectiveness
• Built and tested systems with AWS services including EC2, S3, Lambda, CloudFormation, and API Gateway, plus the Boto3 SDK

Relevant coursework: Computer Systems (C, Assembly), Object Oriented Programming (Java), Linear Algebra (R), Applied Probability and Statistics (R), Database Design and Modeling (SQL), Algorithms and Data Structures, Organizational Programming (OCaml, Python, Rust, Ruby), Web Design (HTML, CSS, JavaScript), Computer Networks (C, C++), Cyber Threat Intelligence

Relevant coursework: Computer Concepts, Firewalls & Network Security, Networking Fundamentals (Network+), Hacking/Cyber Defense (Security+), Python, Unix/Linux