Bryan Miller

Vulnerability Management & Security Analyst

Cybersecurity analyst focused on reducing operational risk. I work across vulnerability management, secure configuration, PowerShell remediation, and security investigations, translating technical findings into measurable improvements.

View Case Studies

Download Resume View GitHub

CompTIA Security+B.S. Cybersecurity | Vulnerability Management

Evidence

Measured security outcomes

Resume-backed outcomes presented with short context, exact numbers, and clear technical scope.

Vulnerability management proof

Measured server-risk reduction

In my current security internship, I supported vulnerability management and remediation work that reduced critical server findings by 100%, high findings by 92%, and medium findings by 88%.

100%

Critical findings eliminated

2 -> 0 critical server findings through vulnerability management and remediation work.

92%

High findings reduced

12 -> 1 high server finding after prioritized remediation and verification.

88%

Medium findings reduced

17 -> 2 medium server findings with remediation tracked through validation.

Network security proof

RDP brute-force attempts reduced through access controls

Inbound Azure NSG rules and VM-level host firewall controls were applied to restrict RDP exposure, reducing observed RDP-related brute-force attempts by 100%.

Verified reduction

100%

RDP brute-force attempts reduced

Access controls reduced observed RDP brute-force attempts.

Featured Case Studies

Security work presented as case studies

Evidence-backed project previews with role context, outcomes, tools, and direct links to the full writeups.

SecOps Analyst / SOC Analyst / Threat Detection Analyst

Password Spray Threat Hunt: RDP Compromise Investigation

Microsoft Defender and Sentinel-style threat hunt that reconstructs a cyber-range Windows VM compromise from password-spray RDP access through execution, persistence, evasion, C2, and attempted exfiltration.

Read case study

Hiring relevance

The RDP compromise investigation shows the ability to pivot across endpoint telemetry, explain what the evidence supports, and separate confirmed activity from unsupported assumptions.

Problem

RDP access after password spraying needed full endpoint pivots.

Outcome

The report reconstructs the attack path and attempted exfiltration.

Concepts

RDP logon analysis, KQL pivots, ATT&CK mapping, and exfil review.

Tools

MDE Advanced HuntingMicrosoft SentinelMicrosoft Defender for EndpointSIEMKQLMITRE ATT&CK

Threat Hunter / SecOps Analyst

The Buyer / Akira Ransomware Threat Hunt

Cyber-range Akira ransomware hunt using Microsoft Defender telemetry to reconstruct remote access, staging, lateral movement, defense evasion, data staging, and impact artifacts.

Read case study

Hiring relevance

The ransomware hunt demonstrates the ability to reconstruct ransomware activity from telemetry, preserve a defensible timeline, and turn observed behavior into detection opportunities.

Problem

Akira activity needed host scoping, timeline rebuild, and gap review.

Outcome

Affected hosts, IOC timing, and detections are documented.

Concepts

Ransomware timeline, remote access triage, tampering, and impact.

Tools

MDE Advanced HuntingMicrosoft SentinelMicrosoft Defender for EndpointSIEMKQLMITRE ATT&CK

Vulnerability Management Analyst

Vulnerability Management Program Implementation

Lab vulnerability management program with policy creation, stakeholder buy-in, authenticated scanning, prioritization, remediation, and verification.

Read case study

Hiring relevance

The vulnerability management project shows the ability to turn scan output into prioritized remediation, communicate risk clearly, and validate that fixes reduced exposure.

Problem

No policy, scan approval, priority model, or verification loop existed.

Outcome

Findings fell from 32 to 4, with criticals eliminated.

Concepts

Governance, authenticated scanning, risk prioritization, and validation.

Tools

TenableAzure Cloud InfrastructureAzure Virtual MachinesPowerShellWindows Server

Security Analyst / Technical Compliance Analyst

DISA STIG Remediation Project

PowerShell remediation scripts with screenshot validation for selected Windows 11 DISA STIG findings in a lab environment.

Read case study

Hiring relevance

The STIG remediation work shows practical secure-configuration judgment: interpreting control requirements, translating them into repeatable PowerShell changes, and preserving validation evidence without overstating compliance.

Problem

Windows 11 STIG findings needed scripted fixes and validation proof.

Outcome

Selected controls are documented without claiming full compliance.

Concepts

Registry policy, audit policy, PowerShell checks, and evidence capture.

Tools

PowerShellDISA STIGCustom DISA STIG GPTWindows 11Windows Registryauditpolgpupdate

Skills

Security skills

Skills used across vulnerability management, Windows hardening, PowerShell remediation, and security investigations.

Security Operations & Investigation

Evidence-led investigation workflows using endpoint, identity, network, and query-based telemetry.

Focus

Microsoft Defender for Endpoint
Sentinel-style KQL
Threat hunting
Incident triage

Tools / Methods

Microsoft Sentinel, SIEM/EDR analysis, Windows telemetry, MITRE ATT&CK mapping, Network forensics

Vulnerability Management

Assessment and remediation work that turns scan results into prioritized, validated risk reduction.

Focus

Tenable scanning
Risk prioritization
Remediation tracking
Validation reporting

Tools / Methods

CVE/CWE review, CVSS scoring, Authenticated scanning, Finding verification

Hardening & Compliance

Secure configuration and compliance remediation for Windows-focused lab environments.

Focus

DISA STIG review
Windows hardening
Secure configuration
PowerShell remediation

Tools / Methods

Windows Registry, auditpol, gpupdate, NIST 800-53, Access control

Automation / Scripting

Repeatable scripts and operational controls that make remediation and validation work easier to reproduce.

Focus

PowerShell
Automated remediation
Repeatable security checks
Operational documentation

Tools / Methods

Bash, Python, Azure NSGs, Firewall rules, pfSense, Wireshark

Background

Background built around practical security work

Marine Corps fire direction control, cybersecurity training, and current internship work inform a practical, evidence-first approach to security.

Professional foundation

My Marine Corps Fire Direction Control experience was built around pressure, precision, and accountability. Additionally, I led small teams, trained Marines on required systems and operating procedures, and learned how much outcomes depend on accurate data. I bring that same mindset to vulnerability management, secure configuration, remediation scripting, and security investigation.

Operations foundation

Marine Corps Fire Direction Control built experience performing under pressure, ensuring data accuracy, leading small teams, and training Marines on required systems.

Cybersecurity preparation

Norwich University cybersecurity coursework, CompTIA Security+, and current internship work support the technical foundation behind the portfolio.

Current security work

Internship work includes vulnerability scanning and reporting, risk prioritization, DISA STIG reviews, PowerShell remediation, Defender detections, Sentinel workbooks, and NSG/firewall controls.

Contact

Review the work or start a conversation.

The case studies, resume, and GitHub repositories are organized so hiring teams can quickly validate the work behind the metrics.

View work Contact GitHub