×
Colin McAllister

Colin McAllister

Security Developer

7028092988
English

Background


About

About

A seasoned Security Developer with a profound committment to cyber security, underpinned by a robust understanding of Python and YAML. Adept at working in a fast-paced environment, with a proven track record of delivering high-quality work on time. A strong team player with a passion for automation, education, and leadership.

Work Experience

Work Experience

  • Security Developer, Arctic Wolf Networks

    Nov, 2022 - Present

    Spearheaded the review and refinement of three major rotations, enhancing team efficiency and demonstrating leadership in process improvement.

    • Proficiently debugged Python and YAML codebases, ensuring code reliability and system integrity.

    • Acted as a key representative for my team during incident investigations.

    • Regularly enhanced operational processes by writing automation scripts.

    • Leveraged extensive experience to provide unique context and insights to the team.

  • Business Analyst, Arctic Wolf Networks

    Dec, 2021 - Nov, 202211 months

    Worked closely with senior leaders to develop meaningful metrics and visualize data, automating 25% of recurring tasks.

    • Headed the implementation of a new scheduling software solution for over 250 employees.

    • Led dozens of meetings, demonstrating strong communication and coordination skills.

  • Team Captain, Arctic Wolf Networks

    Jul, 2021 - Dec, 20215 months

    Led a team of six Security Analysts and Engineers, focusing on goal achievement and resource allocation.

    • Provided daily mentorship to team members.

    • Cultivated meaningful relationships to ensure team success.

  • Triage Security Engineer, Arctic Wolf Networks

    Dec, 2020 - Dec, 20211 year

    Expertly triaged and responded to security alerts, ensuring rapid resolution and minimal impact.

    • Used MITRE ATT&CK framework for incident investigation.

    • Developed and refined new runbooks for consistency among employees.

  • Lead Videographer, CarKey

    Sep, 2019 - Dec, 20201 year 3 months

    Oversaw video production and editing, bringing innovative ideas to visual storytelling.

  • Public Affairs Officer, US Army

    Nov, 2015 - Sep, 20193 years 10 months

    Managed public affairs operations, ensuring effective communication and media relations.

Projects Experience

Projects Experience

  • Public Speaking Engagement at Local Library

    Nov, 2023 - Mar, 20244 months

    Paul Sawyier Public Library asked me to speak about the Dark Web and the importance of personal security online.

    • Explained the nature of the dark web and its impact on personal security.

    • Discussed real-life incidents, including the 2016 incident involving Donald Trump's Twitter account, to illustrate the risks of data breaches.

    • Provided actionable steps for audience members to secure their online accounts, emphasizing the importance of Multi-Factor Authentication and unique passwords.

    • Recommended the use of password managers and other tools to enhance online security.

    • Engaged with the community to raise awareness about cybersecurity and personal data protection.

  • Cloud Resume Challenge

    Oct, 2023 - Dec, 20232 months

    The first step to becoming a cloud engineer is to build and host your resume in the cloud.

    • Resume is created using JSON Schema and automatically converted to HTML, Markdown, and PDF using Python

    • The HTML version of the resume is hosted on AWS S3 and served via CloudFront, with domain registered on Route53

  • Home Network Security Monitoring Project

    Jan, 2023 - Present

    Implemented a comprehensive network monitoring solution in my home using Security Onion.

    • Configured a forward node to capture and forward all network packets for thorough monitoring.

    • Utilized Proxmox for virtualization of the manager/search node, efficiently managing and analyzing network data.

    • Custom-tuned Suricata detection rules to align with the specific network environment and usage patterns of my home.

    • Integrated endpoint log monitoring, including devices across Windows, Linux, and mobile platforms.

    • Developed new network detections to identify and mitigate common threats, enhancing home network security.

  • Discord Alerter for Security Onion

    Jan, 2023 - Present

    Interact with Security Onion alerts and cases via Discord

    • Use Security Onion as a home Intrusion Detection System (IDS) with a forward node on ESXI and a manager node on Proxmox.

    • Configure Elastalert to send raw data to n8n automation platform via webhook where threat intel is injected.

    • Write a Discord Bot using Python to receive injected raw data from n8n and parse it into a readable format.

    • Discord bot sends button interactions to n8n automation server where it interprets the interaction and makes API calls back to Security Onion with the action.

    • Current actions are to suppress by source or destination, open the Security Onion Hunt interface with pre-loaded data, or escalate to a case.

Skills

Skills

  • Development

    Python

    Unit Testing

    CI/CD

    Git

  • Cyber Security

    Detection Testing

    Sigma

    Deception

    Forensics

    Threat Hunting

  • Soft Skills

    Effective Communication

    Leadership

    Empathy

    Customer Success

Education

Education

  • Cyber Security, Master's, SANS Technical Institute

    Jul, 2023 - Present

    ISE 5101 - Security Essentials

    ISE 5201 - Hacker Tools, Techniques, Exploits, and Incident Handling

    ISE 6440 - Advanced Network Forensics and Analysis

  • Computer Science, Master's, Auburn University

    Dec, 2019 - Jan, 2022

    Algorithms

    Data Structures

    Software Development

  • Music Education, Bachelor's, University of Nevada Reno

    Jul, 2007 - Apr, 2012

Certificates

Certificates

Awards

Awards

  • Hackathon Winner , Arctic Wolf Networks

    Awarded on: Nov 01, 2023

    Awarded the prestigious Moonshot Award by Arctic Wolf Networks in recognition of presenting the most innovative and impactful idea during the 2023 Hackathon. Demonstrated exceptional creativity and strategic thinking in developing a comprehensive plan to implement this idea, showcasing potential significant contributions to the company's future endeavors.

  • Triage Security Engineer 1 of the Quarter , Arctic Wolf Networks

    Awarded on: Jul 01, 2021

    Selected for the 'Triage Security Engineer 1 of the Quarter' award by Arctic Wolf Networks in July 2021 from a competitive field of nearly 100 professionals in the department. This prestigious recognition highlights my standout contributions and expertise in cybersecurity. Being chosen for this award in such a large and skilled group underscores my exceptional ability in threat analysis, process improvement, and team leadership, marking a significant milestone in my professional journey.

  • Commandant's List , Leadership Academy - US Army

    Awarded on: Jan 01, 2015

    Recognized on the U.S. Army Commandant's List at the Warrior Leaders Academy, an accolade reserved for the top 20% of the class. This distinction reflects my high level of proficiency in leadership, tactical skills, and strategic thinking, demonstrating exceptional performance and dedication among a group of highly skilled and competitive peers.

Interests

Interests

  • Automation

    Home AssistantNode Red
  • Security

    Password ManagementIntrusion Detection HoneypotsNetwork ArchitectureSIEM Automation
  • Photography

    Canon DSLRPortraiturePhotoshop
  • Music

    Tuba PlayerGarage BandHeadphone Audiophile