Raleigh Boots
Grovetown
Summary
Senior Cybersecurity Engineer with 15 years of experience designing and maturing cyber defense capabilities across the Department of Defense and commercial environments. Expertise spans threat research, threat hunting, detection engineering, operational technology (OT) security, incident response, and cyber threat intelligence. Proven success building greenfield security programs, engineering more than 900 behavioral detections, and leading enterprise hunting operations protecting over 1.5 million DoD systems. Active TS/SCI with Full Scope Polygraph.
Overview
16
16
years of professional experience
1
1
Certification
Work History
Senior Cyber Threat Research Engineer
Athena Technology Group
04.2020 - Current
- Founded and operationalized ARCYBER's first Active Defense and Threat Hunting team, establishing processes, workflows, and analytic methodologies to defend more than 1.5 million DoD systems.
- Selected to establish ARCYBER's first Operational Technology (OT) Threat Team, developing the team's hunting methodology, selecting telemetry and security tooling, defining TTP mappings, and researching adversary activity targeting OT environments.
- Engineered approximately 900 custom threat detections for enterprise IT and OT environments, improving identification of adversary behaviors aligned to the MITRE ATT&CK framework.
- Conducted proactive threat hunting, malware analysis, and incident investigations using Microsoft Defender for Endpoint, CrowdStrike, Kibana, AESS, GabrielNimbus, and JRSS, leading to the discovery and remediation of 90 critical findings across DODIN-A.
- Produced operational threat intelligence using OSINT, packet analysis, and adversary research to provide actionable recommendations to ARCYBER, DISA, NETCOM, Regional Cyber Centers, and senior mission stakeholders.
- Mentored fellow threat analysts on hunting methodologies, detection engineering, and adversary tradecraft, helping mature ARCYBER's Active Defense and OT threat capabilities.
Senior Threat Response Analyst
Applied Systems
04.2022 - 06.2023
- Managed enterprise security operations utilizing CrowdStrike, Datadog, Cisco Firepower, Mimecast, Randori, Tenable.io, Nessus, and BitSight to detect, investigate, and remediate security threats.
- Automated recurring operational workflows, reducing daily manual effort by 70% and enabling the team to focus on higher-priority security initiatives.
- Evaluated emerging security technologies through proof-of-concept testing and vendor engagements to strengthen the organization's defensive posture.
- Authored and maintained technical documentation, SOPs, and knowledge base articles in Jira and Confluence to standardize security operations.
IT Support Engineer
GDIT
11.2019 - 04.2020
- Administered user accounts and permissions for more than 200 users across four classified networks using Active Directory.
- Managed enterprise workstation imaging, deployment, lifecycle management, and hardware support in classified environments.
- Supported mission-critical GEOINT and SIGINT operations by maintaining secure endpoint and network infrastructure.
- Leveraged SCCM and Active Directory to streamline endpoint management and improve operational efficiency.
Network and Systems Engineer
Chiron Technology Services
02.2019 - 06.2019
- Delivered advanced instruction on cyber operations, networking, and security technologies to military personnel and international partners.
- Developed more than 120 hours of cybersecurity curriculum supporting the U.S. Army's 17C Cyber Operations training pipeline.
- Selected to support specialized ARCYBER training initiatives based on operational cyber experience.
GEOINT Analyst
CSG Solutions
02.2018 - 02.2019
- Completed more than 150 operational missions and generated 1,000+ intelligence products supporting time-sensitive intelligence requirements.
- Conducted pattern-of-life analysis and target identification using FMV, MTI, and geospatial intelligence.
- Produced intelligence products from FMV and GEOINT data supporting USCENTCOM and Special Operations missions.
Cyber Operations Specialist
U.S. Army
06.2014 - 01.2018
- Conducted cyber operations, malware analysis, digital forensics, and network analysis supporting NSA and INSCOM missions.
- Performed malware reverse engineering, memory forensics, and disk analysis supporting intelligence collection and cyber operations.
- Developed adversary emulation tools and malicious software to evaluate defensive technologies and operational capabilities.
- Developed SQL queries, database signatures, and automation utilized by more than 60 analysts to improve operational efficiency.
- Provided scripting, troubleshooting, and technical support for mission-critical intelligence infrastructure.
Freelancer
Miscellaneous
08.2010 - 06.2014
- Developed custom software modifications, database solutions, and application configurations using Java, relational databases, and YAML.
- Performed security assessments and proof-of-concept exploit demonstrations to identify vulnerabilities and improve client security posture.
- Advised organizations on mitigating DoS attacks, strengthening network defenses, and implementing security best practices.
Education
Doctor of Computer Science - Big Data Analytics
Colorado Technical University
02-2028
Master of Science - Information Technology
Colorado Technical University
11-2020
Bachelor of Science - Cyber Security
Colorado Technical University
06-2018
Skills
- Cyber threat hunting
- Detection engineering
- Threat intelligence
- Malware analysis
- Incident response
- Security operations management
- MITRE ATT&CK
- Cyber Kill Chain
- OSINT
- Operational Technology
Certification
- GSEC
- GICSP
- CEH
- MTA 98-349
- Network+
- AWS Certified Cloud Practitioner
Timeline
Senior Threat Response Analyst
Applied Systems
04.2022 - 06.2023
Senior Cyber Threat Research Engineer
Athena Technology Group
04.2020 - Current
IT Support Engineer
GDIT
11.2019 - 04.2020
Network and Systems Engineer
Chiron Technology Services
02.2019 - 06.2019
GEOINT Analyst
CSG Solutions
02.2018 - 02.2019
Cyber Operations Specialist
U.S. Army
06.2014 - 01.2018
Freelancer
Miscellaneous
08.2010 - 06.2014
Doctor of Computer Science - Big Data Analytics
Colorado Technical University
Master of Science - Information Technology
Colorado Technical University
Bachelor of Science - Cyber Security
Colorado Technical University