At Resecurity, Inc., I investigate high-severity security incidents, including account takeovers, spear-phishing compromises, and malware outbreaks. I handle triage, containment, and root-cause analysis.
I conduct memory and disk forensic investigations with FTK Imager, Autopsy, and Volatility, while maintaining chain of custody. I also analyze malware in isolated sandboxes and map adversary TTPs to MITRE ATT&CK.
At Resecurity, Inc., I hunt for lateral movement and persistence across Microsoft Sentinel and Splunk. I also investigate insider threats and unauthorized data exfiltration by correlating DLP logs, email telemetry, and access activity.
I coordinate brand-protection operations and abuse takedowns for financial institutions and government entities, working with registrars, hosting platforms, and ICANN. Outside my role, I’ve developed cybersecurity projects including a rule-based firewall, an AI-driven security awareness platform, and a CTF platform.
