Bryan Manhollan

Led Incident Response for Oracle SaaS infrastructure, transitioned case management from ThreatConnect to Tines, automated case handling and metrics, and briefed executive management on incidents and post-incident reviews.

Researched and communicated newly announced vulnerabilities and exploits, and performed pivot analysis on reported indicators to support information assurance for DOE.

Performed QA on backend security devices and proprietary SIEM, led firewall policy audits, automated log parsing with Python, and troubleshot complex multilayer security stacks for customers.

Automated routine tasks with Python, led Splunk deployments, performed in-depth analytics and QA of operational tools, and trained ATS and SOC teams on complex log searching and tooling.

Monitored and analyzed network traffic for the FDA, wrote custom Snort rules, performed packet capture analysis and basic malware analysis, and implemented IDS/IPS detections for APTs.

Provided Tier 1 technical support diagnosing wireless and hardware issues, maintained call handling metrics, and supported Mac OS X familiarity and basic networking setups.

Completed the Microsoft Network Technology Program with hands-on and lecture coursework covering Windows Vista configuration, Windows Server 2003 administration (70-290, 70-291), and ISA Server 2004 (70-350).

Completed some college coursework during 2002–2003 without attainment of a degree.