Cyber Security Developer

Security breaches usually entail more recovery efforts than acts of God. Unlike proverbial lightning, breaches of security can be counted on to strike twice unless the route of compromise has been shut off.

  • Ryan Fortress
  • August 2, 1981
  • Goose Creek, SC
  • ryan@the4tress.net
  • 530.918.8886


  • Customer Success Engineer2015 - Present

    ThreatConnect Inc.

    • Architect, plan, and deploy ThreatConnect deployment within customer networks or within the cloud
    • Provide training for software admins, analyst users, and executives supporting various use-cases of the product
    • Map customer processes and structure into ThreatConnect capabilities/data modeling
    • Provide developer training to customers that wish to build their own capabilities using the product’s open API
    • Drive elimination of any customer or internal bottlenecks impeding problem resolution
    • Develop ongoing relationship with customer and become their advocate
    • Provide proactive guidance and encourage adoption and assist in deployment of new product releases
    • Manage the status and internal customer communications of service requests, product requests, defects, customer project plans, etc.
    • Conduct regular reviews (at least quarterly) of service delivery quality, industry threat assessments and solicit feedback on service delivery and product capabilities and quality
    • Manage the logistical aspects of any events, on-sites, or remotely attended customer facing events in order to fulfill agreement obligations
    • Travel to customer sites to expedite problem resolution, provide ThreatConnect visibility, facilitate communication and project manage initiatives
    • Work with the RSMs to develop sales activities
    • Interface with ThreatConnect Product Managers on behalf of assigned accounts

  • Security Developer2013 - 2015

    Network Security Solutions Plus

    • Developed a tool (Phoenix) that replaced ArcSight for the Military Health Systems NSOC and saved the organization over $1.2 million per year.
    • Phoenix enabled analysts to quickly obtain information from multiple sources (IDS/IPS, HBSS, OSINT, etc.) and integrated existing tools (Splunk, ticketing, wiki, etc) into a single easy to use interface.
    • Increased analyst productivity by 80% and lowered event and incident response time by 70%.
    • Enabled analysts to easily communicate each event between shifts with tight nit logging and notification systems.
    • Application was written in JavaScript, PHP, Python and MySQL.

    Cyber Threat Analysis

    • Provided support for the ongoing analysis of threats capable of impacting resources being serviced by the NSOC NCD SP activity based on review of programmatic, technical, and daily review of open soruce intelligence (OSINT) as well as classified threat warnings and bulletins.
    • Performed daily reviews of cyber threat warnings, bulletins, alerts, and incident reporting documentation and databases produced by the director of National Intelligence (DNI), National Intelligence Council (NIC), Defense intelligence Agency (DIA), National Security Agency (NSA), United States Strategic Command (USSTRATCOM), Joint Task Force Global Network Operations (JTF-GNO), United State Cyber Command (USCYBERCOM), Central Intelligence Agency (CIA), Department of Homeland Security (DHS), and US Computer Emergency Response Team (US CERT).
    • Coordinate and deconflict threat analysis activities and reporting with existing NSOC IAVM program infrastructure.

  • GBS Network Technician2009 - 2013

    ITT Systems

    • Ensure our dedicated network meets DOD-CERT IAVA security standards to provide secure downloads for the US ARCENT G2 Intelligence team.
    • Install and operate the Global Broadcast System which enables the US ARCENT Command Group and G2 Intelligence/Security to view and analyze UAV feeds from throughout South West Asia.
    • Completed over 360 maintenance actions and 12 real world missions to provide over 26,800 hours of secure and non-secure communications capability at 99% availability.
    • Troubleshoot satellite, data, and radio networks as well as Linux and Windows systems when any problems occur.

  • Radio Network Technician2008 - 2009

    General Dynamics IT

    • Responsibilities include installation, operation and maintenance of tactical satellite radio equipment for the Coalition Forces Land Component Command (CFLCC).
    • Network Control Station for six sites which provide a contingency network for all of Third Army's military posts in Kuwait.
    • Equipment handled includes AN/PSC 5, ANCD, and Simple Key Loader.

  • Global Network Services Technician (Level II)2006 - 2008

    Global Crossing Communications

    • Point-of-contact for all inbound customer maintenance requests for every customer issue or trouble ticket submitted from initial ticket acceptance through closure. Worked on assigned trouble tickets, escalated and followed-up with other departments, carriers, and customers to resolve customer circuit issues. Troubleshot existing voice issues using supplied monitoring tools in order to maintain network reliability.
    • Provided second and third level technical support for customer maintenance requests. Provided first level and higher technical support for our most strategic voice customers for both SS7 and VoIP.
    • Minimized mean-time-to-repair (MTTR) on all issues to meet departmental goals. Accessed various network devices and systems for trouble isolation, circuit testing, and resolution. Assisted the department in creating documentation for troubleshooting procedures.

  • Noncommissioned Officer in Charge (Mobilized Reservist)2004 - 2008

    United States Army Reserve

    • Responsible for the daily operations of the ARCENT (Army Central Command) Command Group. Responsibilities include: escorting congressional delegates, senators, and general officers (including the Secretary of State, Secretary of Defense, and over half the congressmen and senators in office at the time); plan and coordinate events such as dinners for distinguished visitors (including President and First Lady Bush).
    • Provided support and worked on a daily basis with General Officers including 6 Brigadier Generals, 1 Major General, and 1 Lieutenant General. Quickly learned the skills needed to work with the most demanding and important customers.

    Primary Instructor

    • Fully responsible for instruction in multiple communications fields and development of students to include classroom and resource management, student accountability, and testing. Ensures students are able to perform the skills taught in a combat environment under extreme conditions.
    • Ft. Gordon and General Dynamics IT accredited/certified instructor in the both 25F and 25C MOSs. Primarily taught Echelons Above Corp switching systems (Node Centers, LEN, 39D) and radio systems (including Singars and AN/PRC 117).


  • Cisco Certified Network Associate Security2015


    CCNA Security

  • Cisco Certified Network Associate2014



  • Linux+2014


  • Database Design Specialist2014

    Certified Internet Web Professional

  • GIAC Certified Incident Handler2012

    Global Information Assurance Center

    This was taken as part of SANS 504.

  • JavaScript Specialist2012

    Certified Internet Web Professional

  • Web Design Specialist2012

    Certified Internet Web Professional

  • Project+2012


  • Certified Ethical Hacker2011

    EC|Council CEH

  • Windows Server 2008 Active Direcotry, Configuring2011

    Microsoft 70-680

  • Security+2010


  • Network+2010



  • Python

  • JavaScript

  • PHP

  • VBScript

  • CSS

  • NoSQL

  • MySQL


  • Splunk

  • Wire Shark

  • Snort

  • Suricata


  • Nessus

  • Metasploit

  • ArcSight


  • Windows 7/8

  • Windows 2008 R2

  • OSX

  • Linux


  • Cisco



Download my Resume

Contact info

Let's keep in touch