Apr 2024 – Mar 2025 · 11 mos · Remote

• Served in the Adversary Pursuit Group (APG) focusing on threat analysis, reverse engineering, and POC tool development.
• Leveraged LLMs such as GPT-4 via Azure OpenAI to accelerate malware triage, extract IOCs, and generate contextual summaries of threats.
• Built internal automation pipelines incorporating prompt engineering and NLP to enrich SOC escalations and enhance threat hunting.
• Contributed insights to product development and engaged the community on evolving TTPs.

Nov 2022 – Apr 2024 · 1 yr 5 mos · Remote

• Supported threat intelligence and R&D of detection/mitigation solutions within Adversary Pursuit Group (APG).
• Conducted malware analysis, reverse engineering, and threat hunting across diverse environments.
• Integrated LLMs (GPT-4) to streamline malware triage, summarize threat activity, and accelerate tool development.
• Authored 50+ public-facing blogs detailing emerging threats, TTPs, and novel tradecraft.
• Leveraged LLMs to accelerate content generation and enhance technical clarity of threat reports.

Jun 2020 – Present · 5 yrs 11 mos · Cyber Protection Team 186 · Hybrid

• Serves as Host Analyst on a Cyber Protection Team, and Mobilized to Fort Gordon, GA and Wiesbaden, Germany, to support NATO operations.
• Monitors and hunts for threats within Army and coalition networks, performing triage on potentially compromised or vulnerable systems, leveraging frameworks like MITRE ATT&CK and the Cyber Kill Chain.
• Analyzes host-based and ICS/SCADA threats, identifies key indicators, and briefs findings and recommendations to senior military and civilian leaders.
• Provides leadership, mentorship, and professional development to junior team members.

Nov 2018 – Mar 2020 · 1 yr 4 mos · 407TH CA BN, Arden Hills, MN

• Administered computer systems, IT networks, and communication systems in varying operational environments.
• Contributed to mission-critical operations requiring rapid problem-solving and technical implementation.
• Aggressively approached unfamiliar tasks with common sense and the urgency required by superiors.

Jul 2017 – Jun 2020 · 2 yrs 11 mos · Mounds View, MN

• Provided comprehensive IT support to 25+ staff, responsible for solving 100% of technical issues.
• Successfully recovered organization from a ransomware attack, rebuilding the network and server environment from the ground up.

Jun 2016 – Jul 2017 · 1 yr 1 mo

• Selected over 35 peers to serve as a team leader for Enroute Mission Command (EMC) program during early testing phase for airborne tactical communications.
• Engineered the design, security, and implementation of new satellite-based network equipment enabling in-flight mission command capabilities to support 82nd and 18th ABC.
• Trained 20+ personnel on advanced network management and IT security protocols for airborne mission-critical systems.

Sep 2013 – May 2016 · 2 yrs 8 mos

• Served on Command Post Node (CPN) team providing critical communication infrastructure in austere operational environments.
• Managed the installation, operation, and maintenance of tactical equipment valued at over $4 million.
• Managed network security between multiple classifications of networks and performed IAVA scans to ensure vulnerabilities were patched and secure.

Sep 2012 – Sep 2013 · 1 yr

• Managed desktop support and secure network access for 12,000 users.
• Developed Standard Operating Procedures for new Trouble Ticket System.
• Designed a Virtual Training Center which allowed colleagues to learn in a protected environment.