Summary
Overview
Work History
Education
Skills
Certification
Accomplishments
Additional Information
Timeline
Generic

Noah Igros

Auburn,AL

Summary

I am a passionate tech professional driven by an impactful mission, eager to expand my knowledge and skills alongside like-minded individuals. I take pride in my robust core values that highlight teamwork, adaptability, creative thinking, independence, and efficient tool utilization to support and remediate cyber incidents with precision in a timely manner.

Overview

8
8
years of professional experience
1
1
Certification

Work History

Combat Communications and Equipment Control

UNITED STATES AIR NATIONAL GUARD
Montgomery, AL
06.2021 - Current
  • Developed a training program for equipment control with 120 tasks for 52 work centers and 104 personnel including in-person courses for new Equipment Custodians and mandatory quarterly EC refresher training
  • Established a policy requiring designated unit Equipment Custodians to track all warranted equipment, resulting in a $43K reduction in resource expenditure
  • Led oversight of all base training exercise projects, tracking $16.5M worth of equipment as the Base Equipment Control Officer
  • Managed project to automate patching for vulnerability management, saving 80 man-hours per month and partnering with Air Force Enterprise Services to meet vulnerability compliance
  • Lead Course Instructor for 96-hour cyber infrastructure training course, 9 students, expediting Agile Combat Deployment Objectives
  • Ensured multi-state communications proficiency between partnered agencies and allied nations effectively meeting mission requirements while maintaining security posture
  • Installed, configured and maintained network infrastructure such as Cisco/Juniper routers, switches and firewalls to maintain communications with the Defense Information Systems Agency (DISA)
  • Configured software and hardware updates for HAIPE devices (Taclane KG-175/KG-250x/xs) to enable secure communications during 2.7K combat flight hours
  • Installed, configured, and maintained computer systems, network equipment, operating systems, and applications
  • Created and configured user accounts in Active Directory and other directory services platforms
  • Led planning, organizing, and executing of real-time missions as Combat Communications, Cyber Infrastructure SME, conducting three missions for Mountain Home AFB, Agile Combat Employment initiative
  • Troubleshot hardware issues and worked with service providers to facilitate repairs for end users
  • Led oversight during 9600 hours of military satellite uptime to identify training gaps, equipment familiarity, and troubleshooting methods
  • Supervisor, five personnel, ensuring proper job training, security awareness training, fitness, and personal development requirements are current and within regulation
  • Created detailed technical documentation for IT processes and procedures
  • Resolved escalated customer inquiries via telephone or remote access tools
  • Maintained inventory of all technology assets within the organization's network infrastructure
  • Participated in media relations strategies to increase public awareness of company activities with foreign and domestic partners

Cybersecurity, SOC EDR Manager

Alabama State OIT
Montgomery, AL
01.2022 - 04.2024
  • Directly supported over 100 state agencies, 600 devices, and 36k+ User Accounts effectively utilizing over $3M per year in resource expenditure
  • Established daily operational guidelines, checklists, escalation procedures, and resources linking Standard Operating Procedures (SOPs) and policies for various tasks given to the Security Operations Center (SOC)
  • Effective communication with customers to ensure a timely and courteous response to inquiries, request, and incidents
  • Efficient Mean Time to Detect/Mean Time to Respond timeframes
  • Developed and maintained information security policies, standards, and procedures that align with best practices and regulations to meet 100% compliance
  • Remediate weekly security alerts through comprehensive investigations of FortiGate firewall logs and Cisco Secure Endpoint data involving malicious web traffic, account compromises, malware, mass or unusual data downloads and more
  • Provided user event frequency statistics to ensure more accurate tuning of Splunk, Tenable, and other Security Information and Event Management (SIEM) tools to ensure peak network performance/usage at no loss to the user
  • MS-ISAC (Multi-State Information Sharing & Analysis Center) representative for the state of Alabama
  • Intelligence sharing, traffic monitoring at the federal level, tracking current and emerging Threat Actors, Tactics, Techniques and Procedures (TTP) development
  • Collaborated with other stakeholders in the state, local, and federal government to identify, prevent, protect, respond to, and recover from cyber attacks
  • J-CSOC (Joint-State Cybersecurity Operations Center) representative for the State of Alabama. 13 participating states for threat intelligence sharing and presentations
  • Private center for threat hunting, trend analysis, safe practices, emerging security tools and table-top events
  • Threat Hunting
  • Condensed reporting on targeted cyber threats including articles, research papers, threat actors, partner agencies and third-party sites
  • Weekly utilization of OSINT and SOCMINT methods to confirm or disprove security measures ensuring systems and users meet policy requirements
  • Collected new data and evidence to implement within FortiGate, Splunk, and Cisco Secure Endpoint to mitigate false positive security alerts
  • Timely and accurate reporting to leadership of critical/high-priority incidents and actions taken by our SOC
  • Created detailed documentation outlining the findings of investigations into security events or incidents to identify areas of improvement
  • Performed software and connector upgrades for applications and security tools
  • Execute Tenable vulnerability scans bi-annually or as-needed
  • Daily use of Microsoft Defender (MCAS) to monitor user account activity and manage Data Loss Prevention
  • Monitored Cisco Umbrella to improve security visibility, detected compromised systems, and protected users on and off the network by blocking threats over any port or protocol before a connection is ever established
  • Regular use of ProofPoint to block malicious email addresses providing proper email security
  • Routine security control assessments to verify implementation accuracy, if they are operating as intended, and producing the desired outcome while maintaining security requirements
  • Planned, developed and deployed new solutions and products with executive leadership, security vendors and customers
  • Planed and supported security engineering
  • Consistently met deadlines and requirements for all projects and production work orders

Cyber Operations, Security Operations Center

UNITED STATES AIR FORCE
Montgomery, AL
03.2017 - 06.2021
  • Installed, maintained and upgraded client hardware, software and network components
  • Performed system backups on a regular basis to ensure data integrity
  • Resolved client-side issues related to hardware, software, networking and peripherals
  • Trained end users on the proper use of technology products or services provided by our SOC
  • Information Technology Equipment Custodian (ITEC)
  • Managed inventory of spare parts for repair or replacement purposes
  • Performed complex office management and administrative duties requiring independent judgment, ability to work with agency staff, built rapport with stateside and foreign government agencies, and community relations
  • Supervised eight personnel work center in performing core duties
  • Incident routing/resolution, creating, applying and maintaining Standard Operating Procedures, incident and project escalation tracking and protocols, Authorized Service Interruptions (ASIs), Notice to Air Missions (NOTAMs), and, but not limited to, Time Compliance Network Orders (TCNOs)
  • Performed root cause analysis on complex technical issues in order to develop appropriate solutions
  • Migrated data between different storage types such as local drives, SANs or NAS devices
  • Active Directory, user account management
  • Crisis Action Team Lead; configured $55K worth of equipment ensuring 24/7 Emergency Operation Communications maximizing Command and Control for a downed aircraft recovery operation
  • Team Lead integrating 36 contractors into squadron operations
  • Trained Enterprise Information Technology as a Service (EITaaS) contractors on daily Communications Focal Point R&Rs for 250 total hours, fortifying $90M Secretary of the Air Force initiative
  • Identified training shortfall; volunteered 90 hours outside of normal schedule to provide critical Authorized Service Interruption training and management to a three-man nightshift team
  • Authorized Service Interruption Manager; coordinated 3,500 service requests and 300 Cyber Tasking Orders (TOs) confirming no loss in network connectivity
  • Awarded the number one secured network in the Middle East
  • First responder tier 1/tier 2 troubleshooting, maintenance, and updates for 6.7K systems, $211M value supporting 8K clients and 44 tenant units
  • Developed Key Process Improvement (KPI's) strategies to promote optimal work center efficiency saving 30 man-hours per month

Education

Malware Prevention, Detection and Response (MPDR) Course -

University of Arkansas (32 Credit Hours)
07-2023

Communications Fly-Away Kit Cyber Infrastructure Course -

Macon, GA
08.2022

Theater Deployable Cyber Infrastructure Course -

Savannah, GA
05.2022

ASSOCIATE OF APPLIED SCIENCE - CYBER OPERATIONS AND WARFARE

Community College of The Air Force
Montgomery, AL
12-2020

Client Systems Technician Training -

Biloxi, MS
Biloxi, MS
09.2017

Skills

  • Active Directory
  • Customer Service
  • Endpoint Security
  • Equipment Control Management
  • FortiGate Firewall
  • LAN/WAN
  • Microsoft Cloud Application Security
  • Email Security
  • Project Management
  • Hardware and Software Maintenance/Deployment
  • Splunk SIEM
  • Threat Hunting
  • Tier I/Tier II Troubleshooting
  • Vulnerability Management

Certification

  • CompTIA A+ 1000 Series, 2017, expired
  • CompTIA Security+ SYO-501, 2017, current
  • Fortinet Network Certified Expert 1, 2 & 3, Intermediate
  • Splunk (SIEM) Level 1, 2 & 3
  • Rubrik Ransomware Course, Montgomery, AL

Accomplishments

  • Air and Space Achievement Medal (3)
  • National Defense Service Medal
  • Global War on Terrorism Expeditionary Medal
  • Global War on Terrorism Service Medal
  • Airman of the Quarter, Mountain Home Air Force Base, 2022, Quarters 2 & 3

Additional Information

Top Secret, Certified Information Systems Security Professional (CISSP)

Timeline

Cybersecurity, SOC EDR Manager

Alabama State OIT
01.2022 - 04.2024

Combat Communications and Equipment Control

UNITED STATES AIR NATIONAL GUARD
06.2021 - Current

Cyber Operations, Security Operations Center

UNITED STATES AIR FORCE
03.2017 - 06.2021

Malware Prevention, Detection and Response (MPDR) Course -

University of Arkansas (32 Credit Hours)

Communications Fly-Away Kit Cyber Infrastructure Course -

Theater Deployable Cyber Infrastructure Course -

ASSOCIATE OF APPLIED SCIENCE - CYBER OPERATIONS AND WARFARE

Community College of The Air Force

Client Systems Technician Training -

Biloxi, MS
Noah Igros