John Karpis

Associate Principal Cyber Engineer Architect @Enlighten

San Antonio, TX, US

Team lead for on-site field service engineer/product champions in Department of Air Force Security Operations Center (SOC); integrates Air Force defensive cyber operations with Department of the Air Force cyber data Big Data Platform. In the past year, John facilitated a platform modernization which reduced cloud storage costs by over 55% from legacy big data computing to a modern, cloud-native architecture, and championed education campaigns and formal instruction on platform capabilities.• Involved in the data ingest acquisition and ingest for Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), Automated Remediation Asset Discovery (ARAD), Host Based Security System (HBSS), and many other network or endpoint logs into the Air Force\'s Big Data Platform. Monitored and gave acquisition direction as to completeness with DoD and federal agency log readiness and retention guidelines to senior principals.• Developed strategy, tactics, best practices, training, and documentation for using the big data platform for threat hunting and forensic analysis on US Air Force networks. Configured threat detections on multiple enclaves using Lucene and SQL analytics. Developed Superset dashboards leading to the fielding and use of over 8k cyber-enabled Airmen via official tasking. Planned for integration of further elements of Air Force defense such as log collectors, SIEM and SOAR engineering, and endpoint defense integration with existing tools.• Coordinated fix actions for application/platform interruptions or unplanned data source downtime.• Fielded over threat signatures monitoring onboarded Air Force systems for secure enclaves.

University of Maryland Global Campus

M.S., Cybersecurity

University of Miami

Bachelor of Science (BSc), Aerospace, Aeronautical and Astronautical Engineering