Hi! I'm Whitney. Systems and security architect based in Charleston, South Carolina.
I suck at intros.
I wear many hats and I crave a challenge.
My geeky interests lie mostly in Linux, security, devops, infrastructure, and automation.
My non geeky interests consist of crossfit, Seinfeld, drawing weird things, and raising lots of children.
Operating Systems
Utilized Cloud Platforms
Containerization
Information Security Tools
VPN
Programming
Database Implementation/Administration
Virtualization
Deployment & Automation Tools
Administration Tools
Continuous Integration & Deployment
Design
Recon InfoSec
November 2018 - Present
Position: Lead Architect
SPARC, an Agile Systems Delivery Hub of Booz Allen Hamilton
August 2011 - November 2018
Position: Senior Systems Engineer
Red Hat
September 2017 - March 2018
Position: Consulting Architect
SPAWAR Systems Center Atlantic
May 2010 - August 2011
Position: Security Engineer
Honeywell Technology Solutions, Inc
June 2009 - May 2010
Position: Information Security Analyst
ASU Technical Support Services
August 2004 - August 2008
Position: Computer Repair Technician
I rebuilt my home lab in early 2018, for a few reasons: to support my work, my LLC, any and all side projects. I am an AWS and overall cloud fangirl through and through, but it adds up quickly.
I will continue to document new developments, as time allows, and add to it, as my wallet allows.
I did a full write up which can be found here.
This is the infrastructure that currently supports OpenSOC.io. I encourage you to go to the website and read up on this project, as it is amazing :)
When we deploy our current stack, it builds the following with CloudFormation and Ansible, configured and ready to be hit by all of our systems and sensors in our CTF range:
There are also pieces that run after everything is built. Once the above CloudFormation stack is done and Ansible deploys all of those applications and configures everything, the playbook continues on to install New Relic agents, Telegraf agents, Graylog sidecar collector / osquery / Wazuh OSSEC agents on all of our own systems, and then it adds everything that needs to be user-facing to ZeroTier.
This project has 2 parts: the deployment scripts, and the deployment dashboard.
Deployment Scripts
The deployment scripts are a combination of Ansible and bash that work together to deploy new applications, environments, and builds within AWS. The diagram describes the process in greater detail.
Deployment Dashboard
The deployment dashboard is written with Python and Flask. It has some DynamoDB on the backend, and it also uses Boto to aggregate data from AWS.
It utilizes the deployment scripts above to automate the entire deployment and build process from a simple dashboard. The output from the deployment scripts is displayed in real time on the dashboard as builds are running.
This started out as a "nice to have" for the conference. But as of DEF CON 23, DEF CON organizers made it the OFFICIAL Android app, and as of 2017, it supports multiple security conferences and is supported by a team of people!
App was written in Java and Kotlin. The database is SQLite populated from a JSON API.
The app can be downloaded here.
The code can be forked from GitHub here.
In 2017, I recruited outside help to work on this project with me going forward, since I don't have the bandwidth to work on it solo anymore.
Note: I have discontinued these as they do not work with the modern versions of Angry Birds.
I needed a way to transfer my Angry Birds scores between Android devices efficiently, so I wrote an app to do it. Four of them, actually. One for each version of Angry Birds. Except Star Wars because I went and had a baby and didn't have time.
A user can choose to either save/restore their scores locally between the game and their SD card, or they can create an account and use the online option, which saves/retrieves their score files to/from AngryBackup.com.
I also wrote the web interface and PHP API that the app uses internally.
App was written in Java. Website was written in HTML, CSS, and PHP. The API was written in PHP. The database is MySQL. Images are property of Rovio but were redrawn by me in Adobe Illustrator. They can be downloaded in AI format here
2004-2009 | Appalachian State University
Bachelor of Science, Business Administration
Computer Information Systems