Bryan Miller

Cybersecurity, Systems Security & Operations

I’m a Security+ certified cybersecurity graduate and U.S. Marine Corps veteran with professional experience in facility networking, troubleshooting, and operations. My lab and cyber-range work covers vulnerability management, threat investigation, Windows hardening, and PowerShell remediation.

View Case Studies

View Resumes View GitHub

CompTIA Security+B.S. Cybersecurity · Summa Cum Laude

Evidence

Lab results and security practice

Lab findings, configuration work, and links to the evidence behind the results.

Vulnerability management lab

32 lab findings reduced to 4

Authenticated Tenable scans tracked a Windows Server lab through seven scan cycles. Software removal, updates, and configuration changes reduced the reported findings from 32 to 4.

Review scan results and remediation evidence

100%

Critical findings eliminated

2 → 0 critical findings in the Windows Server lab.

92%

High findings reduced

12 → 1 high finding in the lab, a rounded 92% reduction.

88%

Medium findings reduced

17 → 2 medium findings in the lab, a rounded 88% reduction.

Cyber-range network controls

Restricting inbound RDP exposure

Configured Azure network security groups and VM host firewalls in the cyber range to restrict inbound access. This work complements the endpoint investigations by connecting authentication activity with practical access-control decisions.

Review the cybersecurity experience summary

Configuration practice

Azure NSGs + host firewalls

Layered inbound controls applied in a simulated environment.

Featured Case Studies

Investigations and remediation, documented

Four lab and cyber-range case studies with environment context, findings, tools, and links to full technical write-ups.

Cyber-range investigation

Password Spray Threat Hunt: RDP Compromise Investigation

Role alignment: SecOps Analyst / SOC Analyst / Threat Detection Analyst

Cyber-range investigation using Microsoft Defender for Endpoint and KQL to trace RDP access, execution, persistence, defense evasion, command-and-control activity, and attempted exfiltration.

Read case study

Skills demonstrated

The RDP compromise investigation shows the ability to pivot across endpoint telemetry, explain what the evidence supports, and separate confirmed activity from unsupported assumptions.

Problem

Suspicious RDP access in a cyber range required investigation across endpoint telemetry.

Outcome

The report reconstructs the attack path and attempted exfiltration.

Concepts

RDP logon analysis, KQL pivots, ATT&CK mapping, and exfiltration evidence review.

Tools

MDE Advanced HuntingMicrosoft SentinelMicrosoft Defender for EndpointSIEMKQLMITRE ATT&CK

Cyber-range investigation

The Buyer / Akira Ransomware Threat Hunt

Role alignment: Threat Hunter / SecOps Analyst

Cyber-range Akira ransomware hunt using Microsoft Defender telemetry to reconstruct remote access, staging, lateral movement, defense evasion, data staging, and impact artifacts.

Read case study

Skills demonstrated

The ransomware hunt demonstrates the ability to reconstruct ransomware activity from telemetry, preserve a defensible timeline, and turn observed behavior into detection opportunities.

Problem

A cyber-range ransomware scenario required host scoping, timeline analysis, and detection-gap review.

Outcome

Two affected lab hosts, investigation findings, and detection recommendations are documented.

Concepts

Ransomware timeline, remote access triage, tampering, and impact.

Tools

MDE Advanced HuntingMicrosoft SentinelMicrosoft Defender for EndpointSIEMKQLMITRE ATT&CK

Lab project

Vulnerability Management Program Implementation

Role alignment: Vulnerability Management Analyst

Windows Server lab covering authenticated Tenable scanning, prioritized remediation, and verification, alongside simulated policy and stakeholder coordination.

Read case study

Skills demonstrated

The vulnerability management project shows the ability to turn scan output into prioritized remediation, communicate risk clearly, and validate that fixes reduced exposure.

Problem

A simulated organization needed a scanning, prioritization, and verification process.

Outcome

Lab findings fell from 32 to 4 across seven scans; critical findings fell from 2 to 0.

Concepts

Governance, authenticated scanning, risk prioritization, and validation.

Tools

TenableAzure Cloud InfrastructureAzure Virtual MachinesPowerShellWindows Server

Lab project

DISA STIG Remediation Project

Role alignment: Security Analyst / Technical Compliance Analyst

PowerShell remediation scripts with screenshot validation for selected Windows 11 DISA STIG findings in a lab environment.

Read case study

Skills demonstrated

The STIG remediation work shows practical secure-configuration judgment: interpreting control requirements, translating them into repeatable PowerShell changes, and preserving validation evidence without overstating compliance.

Problem

Windows 11 STIG findings needed scripted fixes and validation proof.

Outcome

Selected controls are documented without claiming full compliance.

Concepts

Registry policy, audit policy, PowerShell checks, and evidence capture.

Tools

PowerShellDISA STIGCustom DISA STIG GPTWindows 11Windows Registryauditpolgpupdate

Skills

Security, systems, and operational skills

Security capabilities practiced in labs and cyber ranges, alongside professional systems support and operational leadership.

Security Operations & Threat Detection

Cyber-range investigations that correlate endpoint and authentication evidence, document findings, and identify detection opportunities.

Focus

Microsoft Defender for Endpoint
KQL investigation
Threat hunting
Incident triage

Tools / Methods

Microsoft Sentinel, Azure Log Analytics, SIEM/EDR analysis, MITRE ATT&CK mapping, Evidence documentation

Vulnerability Management

Lab assessment and remediation workflows, from authenticated scanning and prioritization to follow-up validation.

Focus

Tenable/Nessus
Authenticated scanning
Risk prioritization
Remediation tracking

Tools / Methods

CVE review, CVSS, Finding verification, Scan comparison, Remediation reporting

Hardening & Technical Compliance

Selected Windows lab controls translated into configuration changes and verification evidence; scoped remediation rather than a claim of full compliance.

Focus

DISA STIG interpretation
Windows hardening
Secure configuration
Control validation

Tools / Methods

Windows Registry, Audit policy, auditpol, gpupdate, Access controls

PowerShell Automation

Developing, adapting, and testing lab scripts for repeatable system configuration, remediation, and verification.

Focus

PowerShell
Remediation scripts
System-state checks
Technical documentation

Tools / Methods

Software removal and updates, Configuration workflows, Registry checks, AI-assisted scripting with validation

Systems & Network Support

Professional facility networking and device troubleshooting, complemented by Windows/Linux systems and network security practice in labs.

Focus

Network connectivity
Device-access troubleshooting
IP security cameras
Facility network maintenance

Tools / Methods

Windows and Linux labs, Azure virtual machines, Azure NSGs, Host firewalls, RDP access restrictions

Operational Leadership

Professional experience coordinating facility operations and leading small Marine Corps teams with clear procedures and accountability.

Focus

Small-team leadership
Training
Operational coordination
Verification procedures

Tools / Methods

Vendor and client communication, Scheduling, Inventory accountability, Maintenance coordination, Data accuracy

Background

From operational systems to security analysis

Professional systems support and operational leadership provide the foundation for my cybersecurity practice.

Professional foundation

My professional background combines facility networking and operations at UTB Ventures with Marine Corps fire direction control and small-team leadership. Both required reliable systems, accurate information, and clear communication. I apply those habits in cybersecurity labs: understand the finding, make a controlled change, verify the result, and document the evidence.

Professional systems support

At UTB Ventures, I installed and maintained facility networking and IP cameras, resolved connectivity issues, and coordinated vendors and client needs.

Leadership and accountability

As a Marine Corps NCO, I led and trained teams of 3–8 Marines and used verification procedures while operating communications and targeting systems.

Cybersecurity education and practice

Building on my B.S. in Cybersecurity and Security+, I continue studying and practicing in the Log(N) Pacific cyber range beyond my degree curriculum. This ongoing work covers vulnerability management, PowerShell hardening, Defender/KQL investigations, and Azure access controls.

Contact

Review the work or start a conversation.

Explore the project evidence and role-specific resumes, or contact me about cybersecurity, security operations, and systems support opportunities.

View case studies Contact GitHub