Art Le Bel.

Lead security SME in an MSSP/MSP, consulting to oil & gas, healthcare-data and banking clients plus many SMBs. Built and deployed security programs with a hands-on, risk-based approach.

• Deployed WAFs for large auction sites, reducing outages from daily to zero.
• Designed and coded a custom 24/7 external attack-surface monitoring solution.
• Built API push/pull integrations to stream custom data such as firewall notifications into the SIEM.
• Reviewed Darktrace configuration and recommended custom ML modeling; monitored CrowdStrike detections via a custom intelligent-filtering dashboard.
• Served as Tier 3 operator for C-level cybersecurity concerns.

Security Program Manager for AMSYS and its clients.

• Implemented and managed security orchestration via APIs into Elasticsearch; designed reporting dashboards for threat hunting, investigations, and status reporting.
• Reviewed system diagrams, interviewed stakeholders, and documented findings, remediation plans, and DevSecOps process optimizations.
• Lead penetration tester with Metasploit, OWASP ZAP, Burp, Nmap, Kali Linux, and custom Python web-app proxies across GCP, Azure, and AWS.

• Processed IRM assessments targeting agile-developed applications.
• Reviewed diagrams, interviewed stakeholders, and documented findings, remediation plans, and DevSecOps optimizations.
• Lead penetration tester (Metasploit, ZAP, Burp, Nmap, Kali) with custom Python web-app proxies.

• Processed Data Protection Program (DPP) assessments targeting EU and GDPR compliance.
• Reviewed diagrams, interviewed stakeholders, and documented findings, remediation plans, and process optimizations for DPP.

SME for a machine-learning-backed malware-detection product built — initially — from Windows logs alone.

• Created a log-centric streaming assessment process for applications and end users; authored "behaviors" and signatures giving context to ML/AI algorithms.
• Dissected malware into log-observable behaviors; demonstrated privilege escalation, reverse TCP/shell, and RCE techniques to refine sensors.
• Built cloud, hybrid, and on-prem deployments (AWS, Docker, AWS CLI/SDK).
• Coded in Python, Java, PHP, JavaScript, Bash, and PowerShell with Elasticsearch, MongoDB, Kafka, Kibana, Logstash, Spark, and Neo4j; Agile via Jira/Confluence.

Traveled the U.S. conducting Security Technical Implementation Guide (STIG) audits and application security reviews across mixed-technology network implementations.

• Senior on-site consultant responsible for final data collection, review, and report delivery.
• Audited hundreds of cloud applications for DoD use; automated scanning with ACAS, Nessus, Nexpose, and WebInspect.
• Conducted static code reviews for Agile/Scrum environments (Java, PHP, .NET, proprietary).
• Delivered threat models and risk assessments across PCI-DSS L3–4, NIST SP 800-37 RMF, FISMA, HIPAA, SANS CSC, SOX IT controls, and ISO.

Partnered directly with Rapid7 to build one of the first large-scale multi-tenant, cloud-based vulnerability-management systems — 25,000+ critical devices across 60+ organizations. Deployed VM for 50+ schools and automated a full FTE's workload within six months.

• Conducted DoS (virtualized DDoS), local privilege escalation, RCE, and web-app reviews (database, static/dynamic source, fuzz/SQLi).
• Wrote custom Ruby scripts and proprietary gems to automate testing and reporting; built custom payloads for near-zero-day vulnerabilities such as Heartbleed.
• Worked with the AWS security team on a securable cloud migration; trained staff on Rapid7 (Nexpose, Metasploit) and core tooling. Became the go-to cloud expert for 700 schools.

• Prepared C&A reports for senior officials using the DoD DIACAP process for commercial and government networks.
• SME on .NET, IIS, Apache, UNIX/*nix, SharePoint, and databases (MS/MySQL, DB2, Oracle).
• Trained personnel on HP Security Suite, Retina, AppDetective, Burp Suite, and WebInspect.

• Prepared C&A reports for senior Air Force officials via DIACAP and the IT-Lean process.
• Lead Retina Remote Enterprise Manager administrator; tuned enterprise network scanning performance.
• Certified in Emission Security; managed TEMPEST security for National Capital Region units.
• Wrote application risk assessments using IBM Rational AppScan and proprietary USAF scripts; built tooling for managerial visibility and standards.

Maintained 300+ combat-operations computers across multiple networks supporting AH-64 (Apache) operations; became the deployed cyber-warfare SME.

• Engineered a 1.5-mile Wi-Fi link relaying real-time test-pilot data to the Battle Captain and commanders; maintained the largest map server deployed (2009).
• Created custom software to investigate and document vulnerability and security events; identified major threats before zero-day.
• Delivered 100% uptime to critical users across multi-segment networks.

IT SME managing digital training environments for 3-159 ARB operations — remote data management, real-time networking, and security systems — for 400+ users.

• Built the most realistic network-training environment for commanders, pilots, and users with upper leadership.
• Maintained McAfee Enterprise, Active Directory, software inventories, and Cisco networking; trained IT/radio staff in AD management and security risk.