Conducts authorized wireless network penetration tests to assess the
Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered
Configures host-based intrusion detection systems (HIDS) to monitor
Hardware Security Modules (HSMs) are tamper-resistant physical devices
Harden LDAP directory services against common attacks including credential
Configure microsegmentation policies to enforce least-privilege workload-to-workload
Deploy Cisco Duo multi-factor authentication across enterprise applications,
Configure secure OAuth 2.0 authorization flows including Authorization
Configures pfSense firewall rules, NAT policies, VPN tunnels, and traffic
Deploys and configures Suricata IDS/IPS with Emerging Threats rulesets,
Configures Microsoft Defender for Endpoint (MDE) advanced protection
Executes containment strategies to stop active adversary operations
Correlates security events in IBM QRadar SIEM using AQL (Ariel Query
Correlates disparate security incidents, IOCs, and adversary behaviors
Deobfuscates malicious JavaScript code used in web-based attacks, phishing
Systematically deobfuscate multi-layer PowerShell malware using AST analysis,
Deploys deception-based honeytokens in Active Directory including fake
Deploys canary files (honeytokens) across file systems to detect ransomware
Deploys and configures CrowdStrike Falcon EDR agents across enterprise
Deploys and configures osquery for real-time endpoint monitoring using
Deploying Palo Alto Networks Prisma Access for SASE-based zero trust