Open to opportunities

Stephen Packard

@stephenpackard

Message

Veteran cybersecurity leader specializing in incident response and AI security.

United States

Message

What I'm looking for

I am seeking senior security roles focused on incident response, SOC leadership, or AI/cloud security where I can drive tool optimization, forensic excellence, and cross-functional crisis containment.

I am a veteran cybersecurity expert with over 20 years of hands-on experience leading incident response, SOC operations, and complex forensic investigations for large enterprises and Fortune 50 clients.

I have deep technical expertise configuring, integrating, and tuning EDR, SIEM, and IDS platforms to ensure optimal telemetry, rapid detection, and effective threat containment. I played a key role in the SolarWinds response and regularly lead forensic timeline reconstruction and malware triage.

My background spans secure cloud architecture, generative AI risk assessment, and ransomware recovery, and I have worked cross-functionally to align security tooling with business processes and compliance frameworks such as NIST and ISO 27001.

I bring a blend of strategic governance, technical execution, and clear executive communication, and I am committed to advancing secure deployments of generative AI and resilient SOC operations.

Experience

Work history, roles, and key accomplishments

Cyber Risk Advisory Analyst

Deloitte

Jan 2020 - Dec 2023 (3 years 11 months)

Managed and optimized EDR and SIEM tools for Fortune 50 clients, led escalated SOC incidents and forensic response, and contributed to SolarWinds incident timeline reconstruction and threat intelligence correlation.

EDR SentinelOne SIEM Incident Response Forensics Threat Hunting SOC

Network & Infrastructure Consultant

Tyehimba Enterprises

Jan 2017 - Dec 2019 (2 years 11 months)

Oversaw secure infrastructure upgrades and deployed monitoring and incident detection across AWS and Azure, leading endpoint hardening and EDR/VPN anomaly detection rollouts for regional clients.

EDR VPN Monitoring Infrastructure Security Integration

Incident Response Lead

Techline Computing

Jan 2014 - Dec 2017 (3 years 11 months)

Directed forensic investigations and ransomware recovery for organizations up to 500 users, developed NIST-aligned playbooks, and deployed SIEM/EDR stacks with tuned alerts and escalation logic.

Forensics Volatility Ransomware SIEM EDR Deployment Log Analysis Threat Intelligence