Crystal Litaker
Berkeley Springs,WV
Summary
Dynamic cybersecurity leader with over 15 years of experience in government and commercial sectors, specializing in offensive cyber techniques, cyber threat intelligence (CTI), and Security Operations Center (SOC) leadership. Expertise in integrating OSINT and CTI into detection logic and threat modeling, ensuring alignment of cyber operations with organizational OKRs and KPIs. Proven track record in oversight, contract and report reviews, and compliance with standards such as NIST, FedRAMP, and ISO 27001, complemented by strong executive-level communication skills. Recognized for creating metrics-driven playbooks, managing cross-functional projects, and mentoring high-performing cybersecurity teams to achieve strategic objectives.
Overview
19
19
years of professional experience
1
1
Certification
Work History
Information Specialist
Department of Veterans Affairs
01.2021 - Current
- Developed business process documentation to assist in standing up a cyber detection engineering team for custom detection logic creation.
- Utilized SharePoint to create a use case repository for continuous and review and improvement of analytic lifecycle.
- Directed oversight of detection engineering and incident response for a 10-member team, aligning operations with OKRs/KPIs.
- Built executive dashboards tracking MTTD, MTTR, false positive rates, and ATT&CK coverage.
- Integrated OSINT and CTI into detection logic and hypothesis-driven hunts, reducing high-severity incident backlog by 25%.
- Developed threat scoring and threat modeling frameworks to prioritize adversary TTPs for proactive hunts.
- Reviewed contracts, vendor reports, and compliance deliverables to ensure FedRAMP/NIST alignment.
- Continuous review of industry standard policies to ensure enterprise compliance is achieved.
- Utilize multiple log ingestion and SIEM products, Microsoft Defender/EDR Suite, Microsoft Sentinel, Splunk, Corelight, Palo Alto IoT, and Everfox.
- Understanding of Microsoft suite query language - Kusto Query Language (KQL) and Splunk query language SPL.
- Review of enterprise wide vendor detections, developed mapping processes for visual dashboard to assist in improvement of detection coverage.
- Participate security related tabletop exercises and provide feedback and actions taken to remediate proposed threats.
- Participate in technical contract review to ensure contract bids align with Request for Proposal (RFP).
- Provide oversight of proactive threat hunt investigations to ensure completion and understanding of potential incidents.
Cybersecurity Analyst
Maveris LLC
06.2019 - 01.2021
- Proactive threat hunting utilizing OSINT to identify potential threats that vendor security tools did not detection.
- Provided investigation reports to peers and leadership. Worked with other CSOC teams, Information Security Officers (ISO) and Points of Contacts (POCs) to develop remediation plan.
- Briefed upper management on progress of investigation to include findings, next steps, potential remediation actions required.
- Performed review of PCAP analysis utilizing FireEye and Wireshark.
- Consistent review and improvement of understanding of the MITRE Adversarial tactics, Techniques and Common Knowledge (ATT&CK) framework to identify post-compromise behaviors.
- - Standardized onboarding and process documentation, improving analyst readiness by 20%.
Threat Hunter
AbleVets LLC
02.2019 - 06.2019
- Executed OSINT/CTI-driven hunts using Splunk and Wireshark, reducing malware incident backlog by 25%.
- Delivered remediation plans and developed repeatable handoff workflows from hunting to response teams.
- Provided investigation reports to peers and leadership. Worked with other CSOC teams, Information Security Officers (ISO) and Points of Contacts (POCs) to develop remediation plan.
- Briefed upper management on progress of investigation to include findings, next steps, potential remediation actions required.
- Performed review of PCAP analysis utilzing FireEeye and Wireshark.
- Consistent review and improvement of understanding of the MITRE Adersarial tactics, Techniques and Common Knowledged (ATT&CK) framework to identify post-compromise behaviors.
- Standardized onboarding and process documentation, improving analyst readiness by 20%.
System Engineer
Tapestry Technologies
10.2017 - 02.2019
- Designed and maintained hybrid cloud architectures across AWS, Azure, and private environments.
- Implemented STIGs and DHS security controls, ensuring compliance with federal cyber standards.
- System administration tasks including server installation, system upgrades and patching of CyberArk, Red hat Linux Servers, WIndows 2016 Severs, IIS,, VMWare, and DNS.
- Provided end user support, account management, and training for maintained systems.
Senior Consultant
Booz Allen Hamilton / Salient CRGT
01.2016 - 10.2017
- Palo Alto Next Generation Firewall Management - Reviewed and managed Application IDs (AppIDs) related to risks associated with AppIDs can be a potential risk to the network.
- Implemented AppID allow/Block requests.
- Utilize F5 Application Security Monitoring solutions to determine risks to client network and add a layer of security to the network stack.
- Performed system administration of BlueCoat/Solera and Splunk logging solutions. Worked with other teams to onboard new log ingestion feeds.
- Conducted offensive cyber investigations using OSINT and CTI to identify adversary infrastructure.
- Created hunting procedures related to the Cyber Kill Chain and OSINT; improved defensive posture of federal clients.
- Led firewall/AppID reviews and performed deep traffic analysis with BlueCoat/Solera and Wireshark.
Sr. Analyst / Security Engineer
Dell Federal (US Coast Guard)
01.2014 - 01.2016
- Engineer and redesigned network architecture and trained USCG staff on incident response procedures.
- Managed DLP, IDPS, PKI, packet capture, and monitoring tools for enhanced cyber defense.
- Provided network monitoring to identify malicious/anomalous network activity utilizing BlueCoat, Niksun, and NetScout solutions.
- Developed and managed IAM solution CyberArk to add audibility of user accounts to the network.
- Rack and cabled multiple network devices to assist with network monitoring such as VSS and IXIA taps.
- Maintained, configured, and managed IDPS solution such as McAfee and SourceFire.
Helpdesk Security Analyst
Adams Communication & Engineering Tech
05.2013 - 01.2014
- Delivered Tier 1/2 security and IT support; issued PKI certificates for secure network access.
- Authored KM articles and trained new analysts on cybersecurity and IT fundamentals.
- Assisted end-users with email security, computer, network, and mobile device support.
- Troubleshoot Citrix, SmartCard, Outlook, MacOS, Windows XP and 7 issues.
- Assisted with networking issues - wireless connection, hardwire connections, and VPN connections.
- Managed users accounts via Active Directory.
- Utilized Unicenter CA Service Desk ticketing system to track incidents and user requests.
IT Service Desk Technician II/ Queue Manager
Catapult Technology
01.2007 - 01.2013
- Managed and Oversaw approximately 40 calls daily and ticketing workflow, SLA adherence, and escalation management.
- Conducted training in networking and IT security for junior staff.
- Managed end-user accounts - creation, deletion, and updates via Active Directory.
- Smartcard/ActivCard software support; troubleshoot errors.
- Citrix Troubleshoot citrix errors, uninstall and install Citrix software.
- Blackberry Coordinator/Mobile Device lead, in depth understanding of mobile device and onboarding onto enterprise network. Developed knowledge base articles to assist junior analyst with troubleshooting.
- Remote connection troubleshooting experience.
Education
Master of Science - Information Security And Assurance
Western Governors University
Salt Lake City, UT12-2018
Bachelor of Science - Information Technology
Western Governors University
Salt Lake City, UT04-2014
Associate of Science - Computer Forensics
Hagerstown Business College
Hagerstown, MD06-2007
Skills
- Offensive Cyber & Threat Intelligence (OSINT, CTI, Threat Modeling, Adversary Emulation)
- SOC Leadership & Oversight (Team Management, OKRs/KPIs, Program Governance)
- Detection Engineering & Threat Hunting (Hypothesis-Driven, MITRE ATT&CK, SIEM/EDR)
- Incident Response & Forensics (Playbooks, Disk/Memory Analysis, Tabletop Exercises)
- Project & Program Management (Cross-Functional Delivery, Reporting, Stakeholder Engagement)
- Compliance & Risk Management (NIST 800-53, FedRAMP, ISO 27001, HIPAA)
Certification
- GIAC Security Operations Manager (GSOM)
- Information Technology Infrastructure Library (ITIL) v3
- Certified Ethical Hacker (CEH)
- Computer Hacker Forensics Investigator (CHFI)
- CompTIA Security+
- CompTIA Network+
- CompTIA Linux+
- CompTIA Project+
- LPIC-1: Linux Server Professional
- Microsoft Technology Associated (MTA): Windows OS Fundamentals
- Microsoft Technology Associated (MTA): Windows Server Administration Fundamentals
- Helpdesk Institute - Helpdesk Analyst Level 2
- Certified Internet Webmaster (CIW) Web Design Specialist
- Certified Internet Webmaster (CIW) Database Design
- Certified Internet Webmaster (CIW) JavaScript Specialist
Timeline
Information Specialist
Department of Veterans Affairs
01.2021 - Current
Cybersecurity Analyst
Maveris LLC
06.2019 - 01.2021
Threat Hunter
AbleVets LLC
02.2019 - 06.2019
System Engineer
Tapestry Technologies
10.2017 - 02.2019
Senior Consultant
Booz Allen Hamilton / Salient CRGT
01.2016 - 10.2017
Sr. Analyst / Security Engineer
Dell Federal (US Coast Guard)
01.2014 - 01.2016
Helpdesk Security Analyst
Adams Communication & Engineering Tech
05.2013 - 01.2014
IT Service Desk Technician II/ Queue Manager
Catapult Technology
01.2007 - 01.2013
Master of Science - Information Security And Assurance
Western Governors University
Bachelor of Science - Information Technology
Western Governors University
Associate of Science - Computer Forensics
Hagerstown Business College
Similar Profiles
Gregory EllisGregory Ellis
Advanced Medical Support Assistant at Department of Veterans Affairs, Central TX Veterans HealthcareAdvanced Medical Support Assistant at Department of Veterans Affairs, Central TX Veterans Healthcare
Bruce RitenburgBruce Ritenburg
VETERAN CLAIMS EXAMINER INSURANCE at Department Of Veterans Affairs, Veterans Benefits AdminVETERAN CLAIMS EXAMINER INSURANCE at Department Of Veterans Affairs, Veterans Benefits Admin
Angela Antoinette PerkinsAngela Antoinette Perkins
Health System Specialist at Department of Veterans Affairs/ Veterans Health AdministrationHealth System Specialist at Department of Veterans Affairs/ Veterans Health Administration
Audrey TimmAudrey Timm
Rating Veterans Service Representative at Department Of Veterans Affairs, Veterans Benefits AdminRating Veterans Service Representative at Department Of Veterans Affairs, Veterans Benefits Admin
Collin MillerCollin Miller
Field Technician at Berkeley Springs Instruments, LLCField Technician at Berkeley Springs Instruments, LLC