Terry James

About Terry James

Cybersecurity leader and technical lead with 18+ years of experience designing and implementing enterprise-level security strategies in high-stakes environments, including the Department of Defense. Specialized in large-scale security onboarding and operations using Microsoft Defender for Endpoint, Defender for Servers, Microsoft XDR, and Azure Arc across hybrid Windows and Linux fleets. Expert in navigating proxy-restricted and air-gapped networks, troubleshooting complex telemetry issues, and building repeatable offline installation workflows. Proven ability to lead cross-functional teams, develop SOPs that scale delivery across mission partners, and drive compliance with DOD and SOC standards. Adept at aligning technical security practices with business objectives and communicating complex concepts to diverse stakeholders. Holds an active DOD Top Secret Clearance and CASP+ certification.Core CompetenciesSecurity Engineering: Microsoft Defender for Endpoint (MDE), Defender for Servers, Microsoft XDR Hybrid Cloud Ops: Azure Arc, Azure Monitor Agent (AMA), Data Collection Rules (DCR), Log Analytics Restricted Networks: Disconnected and restricted environments, proxy/allowlisting validation Threat Hunting: Advanced Hunting, KQL (Kusto Query Language), TTPs Automation: Python & PowerShell Automation, Bash, offline packaging, dependency management Identity & Encryption: Certificates, PFX workflows, OpenSSL troubleshooting Systems Management: Windows Server, Linux (RHEL, OEL, CentOS), hardening support Leadership: SOC Leadership & Staff Development, Executive Security Briefings Compliance: Risk Management Frameworks (RMF), CMMC, SOC2, NIS2 Compliance Incident Response: Crisis Management, Vulnerability remediation coordination, SOP development

Experience

1. Cybersecurity Engineer (Configuration Management and Deployment)

   Leidos

   Mar 2023 — Present · Chambersburg, PA, US

   Serve as technical lead for large-scale security onboarding and operations in U.S. Government environments, specializing in Microsoft Defender for Endpoint (MDE), Defender for Servers, and Microsoft XDR.Onboarded and secured hybrid Windows and Linux (RHEL, OEL, CentOS) fleets into Azure Arc environments; implemented Azure Monitor Agent (AMA) and Data Collection Rules (DCR) to ensure high-fidelity telemetry.Engineered repeatable offline installation workflows and robust dependency management strategies to facilitate deployment within air-gapped and proxy-restricted environments.Resolved complex telemetry and onboarding issues by troubleshooting OpenSSL, certificate/PFX workflows, and proxy allowlisting validation to maintain continuous monitoring.Automated vulnerability detection and remediation workflows using Python and PowerShell, utilizing virtual environments to streamline script deployment.Developed comprehensive SOPs and technical documentation to scale security delivery across teams and mission partners, ensuring standardized practices for Advanced Hunting and KQL usage.Lead vulnerability remediation coordination and hardening support, managing complex change requests and collaborating with stakeholders to improve organizational security posture.

Education

• Jefferson County High School

  High School Diploma

  1989 — 1992

• University of Maine at Presque Isle

  Bachelor's Degree, Management Information Systems

  2023 — 2024

Skills

• Program Management
• Leadership