Defending What Matters Most
Cybersecurity Specialist
U.S. Military Veteran with over 11 years in security — bringing discipline, precision,
and real-world experience to every engagement
My Resumeand real-world experience to every engagement
My foundation in security wasn't built behind a screen — it was built in the field. As a Fire Support Specialist in the U.S. Army National Guard, I learned that real protection requires discipline, clear communication, and the ability to make sound decisions under pressure. I carried that mindset into over a decade of physical security leadership, most recently coordinating a 50-person security network and managing 1,000+ documented incident responses annually at Walt Disney World.
What pulled me toward cybersecurity was the same instinct that shaped my entire career: threats evolve, and the people protecting against them have to evolve faster. I've since built a technical foundation centered on threat detection, vulnerability management, and incident response — working with tools like Splunk, CrowdStrike, and frameworks like MITRE ATT&CK to identify and respond to risks before they become breaches.
Delivering comprehensive endpoint protection through proactive malware remediation, device hardening, patch management, and threat intelligence integration to minimize attack surfaces and reduce organizational risk.
Building resilient cybersecurity programs through rigorous risk assessments, policy frameworks, audit controls, and adherence to leading regulatory standards including NIST, ISO, and CMMC.
A specialist bridging the strengths of internal and external cybersecurity capabilities to build resilient, adaptive defenses that respond to threats at every layer.
Threat detection & hunting, incident response, and SIEM/log analysis — turning complex data into decisive action to protect organizations from evolving threats
Validate alert severity. Classify true vs. false positive. Assign priority using CVSS and business context.
Identify affected assets, accounts, and network segments. Establish the incident timeline from log evidence.
Isolate compromised endpoints via EDR. Block malicious IPs/domains. Disable affected accounts as needed.
Correlate multi-source telemetry. Map TTPs to MITRE ATT&CK. Extract and document all IOCs.
Produce structured IR report: timeline, findings, ATT&CK mapping, remediation actions, and lessons learned.
