Nicholas Gleason

Sr. Cybersecurity Engineer

About

Cybersecurity Engineer with progressive experience spanning DoD cyber operations and private-sector consulting. I architect and deploy enterprise security solutions across diverse client environments, specializing in EDR/SIEM implementations, incident response, and threat detection. Deep expertise in CrowdStrike, SentinelOne, Rapid7, and Microsoft security stack.

Experience

June 2023 – Present

Sr. Cybersecurity Engineer

Resultant

Architect end-to-end security stack deployments for enterprise clients, implementing EDR (SentinelOne, CrowdStrike), email security (Proofpoint, Barracuda), and SIEM platforms across healthcare, finance, and manufacturing
Lead incident response for high-severity security events including ransomware attacks, business email compromise, and firewall breaches
Engineer automated threat detection workflows in Rapid7 InsightIDR and ConnectWise SIEM, creating custom correlation rules aligned to MITRE ATT&CK
Manage enterprise security awareness programs using KnowBe4, deploying targeted phishing simulations and training campaigns

December 2022 – June 2023

Network Engineer

Resultant

Led network infrastructure modernization projects migrating enterprise clients from legacy Cisco hardware to full Meraki stack
Configured and maintained Checkpoint firewall infrastructure across multi-site environments

September 2021 – December 2022

Network Engineer

U.S. Cyber Command

Architected, configured, and deployed next-generation firewall infrastructure protecting classified networks
Collaborated with SOC to optimize threat monitoring coverage, tuning correlation rules and conducting traffic analysis
Trained and mentored Tier 1 and Tier 2 personnel on network architecture and security configurations

July 2019 – September 2021

Network Engineer

Department of Defense

Led network infrastructure preparation and remediation for CISA security audits
Architected and deployed Cisco DNA-C software-defined networking solution with ISE integration
Spearheaded implementation of 802.1x network access control across enterprise environment

Technical Skills

EDR/XDR

SentinelOne CrowdStrike Falcon Microsoft Defender Trend Micro

SIEM & Detection

Rapid7 InsightIDR Splunk ConnectWise SIEM Varonis Velociraptor

Vulnerability Management

Rapid7 InsightVM Nessus ConnectSecure Qualys

Network Security

Palo Alto Checkpoint Cisco ASA Meraki Juniper

Cloud & Identity

Microsoft 365 Security Azure Security Center AWS Security Cisco ISE

Frameworks & Automation

NIST CSF MITRE ATT&CK DISA STIG Python PowerShell Bash

Projects

Security Runbooks

Production

Incident response playbooks and security procedures.

AWS S3 CloudFront Terraform

View Site →

Email Header Analyzer

Production

Phishing detection tool analyzing SPF/DKIM/DMARC authentication and sender alignment. Serverless Python backend with WAF.

AWS Lambda API Gateway Python WAF

Launch Tool →