Jesse K.
Details
Information Technology with Information Assurance Specialization
University of Maryland Global Campus
2015 : 2016
Bachelor of Science (B.S.)
Computer Networks & Security
University of Maryland Global Campus
2013 : 2015
• Maintain in-depth technical knowledge of adversarial activity in order to replicate similar tactics, techniques, and procedures (TTPs) during assessments.
• Perform controlled exploitation of vulnerabilities to demonstrate full impact and risk of security findings based on business and mission impact.
• Use manual testing to identify vulnerabilities that are commonly missed in security assessments, and automated tools.
• Provide detail-oriented technical assistance with remediation and mitigation efforts, often in the form of verbal and/or written communication.
• Create comprehensive assessment reports that clearly identify root cause and remediation strategies.
2018 : Present
Undisclosed
Senior Lead Penetration Tester
• Develop curriculum for online cyber security courses using Udemy's online teaching platform, including lectures and labs.
• Provide mentoring for students to help them progress in their professional and academic careers.
• Published Hands-on Penetration Testing Labs 1.0 - 4.0 courses.
• Published Kali Linux Web App Penetration Testing Labs course.
• Published Snort Intrusion Detection, Rule Writing, and PCAP Analysis course.
• Published Network Security Analysis Using Wireshark, Snort, and SO course.
2017 :
Udemy
Cybersecurity Instructor
• Perform network and web application penetration tests and write penetration test reports.
• Deploy and administer Security Onion sensors, monitor Snort intrusion detection systems (IDS), and write Snort rules.
• Analyze PCAPs using tools such as Wireshark, NetWitness, NetworkMiner, and Tcpdump.
• Train and mentor junior SOC analysts.
• Utilize JIRA to create and escalate reports of criteria such as network intrusions,
threats, and security policy violations.
• Develop Splunk Security Information and Event Management (SIEM) content, perform
searches, monitor dashboards, and analyze correlation alerts.
• Interpret Nessus scan results and assist with vulnerability assessment and management.
• Accumulate and vet indicators of compromise and indicators of attack for threat intelligence awareness.
2016 : 2018
Undisclosed
Senior SOC Analyst
• Performed physical, network, mobile, and web application penetration tests and wrote penetration test reports.
• Monitored Snort intrusion detection systems (IDS) and proprietary SIEM.
• Trained and mentored new analysts, delegated shift responsibilities, and provided assistance
for report creation.
• Created and escalated technically detailed reports based on network intrusions and threats.
• Provided assistance in computer incident investigations.
• Analyzed and evaluated network and system anomalies.
• Developed system diagrams, network diagrams, and data flow diagrams.
• Created System Security Plans (SSPs), policies, procedures, and provided technical writing
support.
• Conducted FIPS-199 evaluations, privacy threshold assessments, and privacy impact
assessments.
• Assisted organizations with FedRAMP and CUI compliance.
2014 : 2016
Undisclosed
Network Security Analyst / Backup Team Lead / Senior Information Systems Security Engineer
• Monitored ArcSight SIEM and McAfee IntruShield IDS at a 24x7x365 security operations center. Assisted in analyzing security systems to ensure proper connectivity of routers, firewalls, and switches.
• Trained new analysts and carried out shift leadership responsibilities.
• Wrote security status reports to provide system status and reported security and policy violations.
• Interacted with customers to understand their security needs and assisted in implementing solutions to accommodate them.
2013 : 2014
Undisclosed
Information Security Analyst
Skills
Acunetix, arcsight, Bash, Burp Suite, computer security, Cybersecurity, Cyber Security, elasticstack, information assurance, Information Security, information technology, intrusion detection, kali linux, Metasploit, nessus, netwitness, Network Security, network traffic analysis, Penetration Testing, perl, python, Security, snort, splunk, tcpdump, vulnerability assessment, wireshark, troubleshooting, vpn, Cisco Technologies, Cisco Routers, help desk support, cisco ios, Microsoft Office, vmware workstation, VirtualBox, Networking Protocol, Microsoft Operating Systems, unix operating systems, Internet Information Services, ceh, mcafee epo, information security management, security clearance, spunk, firewalls, windows server, technical support, comptia network, burpsuite
About
Summary: Jesse is a cybersecurity expert with a breadth and depth of knowledge, professional experience, and top of the line credentials directly related to his field of expertise. Professional strengths include penetration testing, ethical hacking, security analysis, intrusion detection, training, and technical writing. Jesse has a true passion for cybersecurity and information technology, and an insatiable ambition to further his knowledge and professional skill set.
Specialties: Network and Web Application Penetration Testing (Kali Linux, BurpSuite, Nmap, Metasploit, etc); Vulnerability Scanning (Nessus, Acunetix, Netsparker, Nikto, etc); Scripting (Python, Perl, Bash); Intrusion Detection / Network Security Monitoring (Security Onion, Snort, Bro, and Suricata); SIEM Technology (Elasticsearch, Logstash, Kibana (ELK), ArcSight, and Splunk); PCAP analysis (Tcpdump, Wireshark, NetworkMiner, NetWitness/Security Analytics).
Current Degrees/Certifications: M.S. in Information Technology with Information Assurance Specialization / B.S. in Computer Networks and Security / Network+, A+, Security+, Linux+, Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), Certified Information Systems Security Professional (CISSP), eLearnsecurity Web application Penetration Tester (eWPT)
Future Goals: OSCE, OSWE, PhD
E-mail for business inquiries: kurruscyberlabs@gmail.com