Eric Some

About Eric Some

I\'m a highly organized, detail-oriented Cyber Fusion Center officer leading with extensive experience leading interdisciplinary teams across cybersecurity and intelligence operations. I specialize in developing and executing advanced strategies, integrating Artificial Intelligence (AI), machine learning, and data-driven analytics to enhance cyber threat detection, analysis, and response capabilities.I possess a proven ability to identify, analyze, and rapidly respond to emerging cyber threats by leveraging AI-assisted threat intelligence platforms, automated security analytics, and predictive threat modeling. My expertise includes correlating multi-source intelligence data, applying advanced threat-hunting methodologies, and operationalizing security intelligence to strengthen organizational cyber resilience.Adept at collaborating with diverse stakeholders—including security operations centers (SOC), intelligence analysts, and governance teams—I ensure coordinated and timely responses to complex cyber incidents while supporting strategic risk management and regulatory compliance initiatives.Technical Skills:Cyber Threat Intelligence (CTI) · AI-Driven Security Analytics · Machine Learning for Threat Detection · Tactics, Techniques, and Procedures (TTP) Analysis · Malware Analysis · Endpoint Security · Application Security · Security Research · Cyber Threat Hunting (CTH) · Incident Response · CIS Controls Compliance · NIST SP 800-53 · Risk Management Framework (RMF) · IT Security Assessments · Data Security · Information Security · Network Security · Threat & Vulnerability Management · Security Automation · SIEM/SOAR Integration.

Experience

1. Cybersecurity Fusion Program Lead

   Washington Metropolitan Area Transit Authority (WMATA)

   May 2016 — Present · Washington, DC, US

   Focus on organization cybersecurity efficiency and effectiveness and client\'s IT Modernization, Digital Transformation, Cloud migration, and Cloud optimization while aligning with business goals and objectives.Led a team of cyber analysts and mentored junior analysts, fostering professional growth and skill development.Set the team\'s direction aligned with organizational goals and objectives, overseeing analysts\' work activities while providing input on forecasting and planning.Directed the daily tasks of the Threat Detection and Investigation team within the Cyber Fusion Center, ensuring efficient operations and timely threat response.Managed multiple cybersecurity tool projects, including SIEM, XDR, EDR, and EMS, from planning to deployment.Supervised incident response, conducting thorough investigations into attempted security breaches, ensuring timely containment and recovery while minimizing business impact.Developed a comprehensive threat detection use case library to enhance the organization’s defensive capabilities.Created tabletop exercise (TTX) runbooks and conducted TTX sessions with regional partners to improve incident response readiness.Collaborated with cross-functional teams to successfully execute a variety of cybersecurity projects.Provided daily briefings to the department on threat detection, investigation, and incident response updates.

Education

• University of Fairfax

  PhD, Cyber security and information Assurance

• University of the District of Columbia

  Bachelor's degree, Information Technology

  2007 — 2012

• University of Maryland Global Campus

  Master's degree, Cyber Security

  2015 — 2017