JAKE VULLO

Project Overview: Played a pivotal role in a high-impact cybersecurity initiative at CSIRO, identifying and remediating approximately 30,000 instances of end-of-life applications and operating systems.

• Developed and implemented data analyses, data collection systems, and other strategies that optimised statistical efficiency and quality.
• Assessed potential risks, identified risk mitigation strategies, and implemented risk control measures.
• Designed and implemented interactive Power BI dashboards, visualising vulnerability status reports for improved decision-making.
• Employed advanced vulnerability scanning tools, like Nessus and Tenable for thorough scans, identifying EoL software and vulnerabilities accurately.
• Engineered automated Excel solution for streamlined tracking and management of vulnerabilities, boosting team productivity.
• Conducted targeted remediation scans and validation checks to resolve identified vulnerabilities, ensuring compliance with security standards.
• Coordinated with stakeholders to prioritise patching activities, facilitating seamless collaboration and timely remediation.
• Translated complex cybersecurity concepts into clear insights for non-technical stakeholders, fostering informed decision-making.

• Conducted digital forensics investigations on servers, workstations, mobile devices, and cloud environments to identify compromises and threat actors.
• Collected, preserved, and analysed digital evidence using tools such as EnCase, FTK, and Cellebrite.
• Supported reconstruction of incident timelines by analysing logs, file systems, and network traffic.
• Documented findings in concise reports for internal teams and external stakeholders while ensuring adherence to chain-of-custody protocols.
• Participated in responses to cyber incidents including ransomware, data breaches, and insider threats.
• Assisted in triaging alerts from SIEM systems like Splunk and escalating critical issues to senior analysts.
• Configured simulated phishing campaigns using GoPhish to assess user susceptibility and behaviour.
• Contributed to GRC frameworks by supporting risk assessments and compliance audits aligned with ISO 27001.
• Analysed and processed digital information for eDiscovery and forensic technology matters.
• Utilised tools such as Relativity, Nuix, and Intella for dataset processing and analysis.
• Produced digital evidence for legal and regulatory purposes while ensuring data integrity.
• Managed cloud-based environments by configuring Identity and Access Management and Multi-Factor Authentication.
• Analysed network traffic logs, firewall logs, intrusion detection system alerts, and antivirus reports to identify potential threats.

• Extracted, manipulated, prepared, and cleansed data using various tools, including Excel.
• Collaborated with stakeholders to deliver high-quality products.
• Created and maintained procedural documentation for data processes.
• Consolidated multiple data sets into a standardized master dataset.
• Utilised PowerBI to integrate data from diverse sources and generate insightful dashboards.
• Identified operational inefficiencies and implemented automated solutions, including SQL approaches.
• Established and managed a comprehensive data governance framework for the alliance.
• Generated reports to track progress and inform decision-making.