E-5 · 2000 – 2015
Dustin
Keeton
Cybersecurity Engineer & Federal Incident Response Lead
Cary, NC
Summary
Security engineer managing endpoint detection and incident response for 200,000+ federal endpoints across 35 agencies. I hold escalation authority for high-severity threats, build compliance policy against DISA STIG and OMB standards, and make containment decisions without sandbox tooling—then document them to survive audit review months later. Active DoD Secret clearance, CISSP-certified, pursuing M.S. in Cybersecurity at Georgia Tech.
Impact
200,000+
Federal endpoints managed
35
Agency tenants supported
10+
Years in IT security
Experience
2022-Present
Cybersecurity Consultant, Endpoint Protection Engineer (EDR/ETP)
Quantum Sky · Cary, NC
- Own detection integrity, endpoint coverage, policy administration, and platform health for CrowdStrike Falcon and Trellix ETP across 35 tenants, balancing each tenant's false-positive tolerance against its mission impact.
- Hold escalation authority for high-severity incidents, including advanced phishing campaigns, MFA-bypass attempts, and conflicts between security controls. Make containment calls from analysis, without sandbox or detonation tooling, and document them to hold up under audit review months later.
- Build endpoint and email protection policy that meets DISA STIG, FIPS 140-2, and OMB M-21-31 baselines, delivered under formal change control within SLA.
- Evaluate third-party tool exception requests against those baselines and write the risk analysis government decision authorities use to approve or deny them.
2020-2025
IT Security and Compliance Specialist
North Carolina Department of Information Technology · Raleigh, NC
- Owned the enterprise vulnerability management program on Tenable.sc: scan scheduling, discovery, prioritization, remediation coordination with system owners across agencies, and verification of closure.
- Applied NIST SP 800-30 semi-quantitative analysis to rank remediation by asset criticality, business impact, and threat likelihood, then defended those rankings to the system owners who had to do the work.
- Ran threat modeling exercises and monitored external attack surface using CrowdStrike Falcon, Cisco Talos, RiskIQ, and BitSight.
- Served as a technical point of contact during periodic audits: produced control evidence, answered auditor questions, and contributed to ATO-related risk reporting against NIST SP 800-53 control subsets.
2016-2022
Supply Chain & Logistics Operations Specialist
North Carolina National Guard · Raleigh, NC
- Processed training order requests and budget reservations in ATRRS and GCSS-Army, supporting training and readiness for approximately 12,000 Soldiers statewide.
2016-2017
Tier 1 Information Security Analyst
ettain group ·
- Triaged alerts against SLA and SLO targets in a globally distributed SOC, correlating telemetry to classify each event and escalating confirmed threats.
- Used Cisco Talos, Kibana, and Sourcefire to analyze traffic and recommend courses of action through Remedy and ServiceNow.
- Contributed exam questions during development of the Cisco CCNA Cyber Ops certification.
2015-2016
Technical Support Engineer
LogicNow ·
- Resolved roughly 700 client tickets in an RMM environment and trained clients to deploy antivirus, cloud backup, web protection, and patch management policy.
2009-2015
Communications Systems Lead & Technical Operations Manager
United States Marine Corps Reserve ·
- Led training and operational readiness for a 25-Marine communications platoon supporting expeditionary command and control.
- Operated and maintained long-haul tactical transport integrating radio, telephony, and data through multiplexing and digital switching. Performed transport-layer fault isolation, service restoration, and COMSEC enforcement under mission conditions.
- Served as a critical leader for section and platoon operations during the Communications Company Annual Training, facilitating operational readiness and successful execution of key exercises.
- Functioned effectively as the Staff Non-Commissioned Officer in Charge (SNCOIC) of the section, demonstrating sound decision-making and technical proficiency that earned company leadership recognition.
2001-2008
Avionics & Electrical Systems Technician
United States Navy ·
- Aircraft electrical and avionics maintenance, troubleshooting, and QA with VFA-113 and aboard USS Kitty Hawk (CV-63)
- Executed scheduled and unscheduled corrosion prevention and treatment protocols across airframes, landing gear, and flight control surfaces on 10 FA-18C aircraft, maintaining structural integrity and mission readiness.
- Contributed directly to unit operational excellence during deployments and exercises, including deployment aboard USS RONALD REAGAN (CVN 76) during WESTPAC 2008 and COMPTUEX/JTFEX, supporting the command in earning the 2007 LTJG Bruce Carrier Award for Maintenance Excellence.
- Assisted the Corrosion Control work center in the expeditious completion of 21 aircraft 84-day special inspections, ensuring mission readiness and compliance with maintenance schedules.
Skills
Security Operations & Incident Response
Endpoint Detection & Response (EDR) · Email Threat Protection · Incident Escalation & Triage · Alert Analysis & Correlation · Phishing & MFA-Bypass Investigation · Security Operations Center (SOC) Management
Vulnerability & Risk Management
Enterprise Vulnerability Management · Risk-Based Remediation Prioritization · Threat Modeling · Attack Surface Monitoring · Third-Party Risk Assessment · NIST SP 800-30 Analysis
Compliance & Security Frameworks
NIST 800-53 Control Auditing · FedRAMP Governance · FISMA Compliance · DISA STIGs · FIPS 140-2 · M-21-31 Compliance · Security Policy Development
Security Tools & Platforms
CrowdStrike Falcon · Tenable.sc · Trellix Email Security · Cisco Talos · RiskIQ · BitSight · ServiceNow · Kibana
Certifications & Credentials
CISSP · Active DoD Secret Clearance · CompTIA Security+
Education and certifications
Degree ·
Bachelor of Science, Criminal Justice and Criminology
Barton College
Degree · 2028
Master of Science, Cybersecurity
Georgia Institute of Technology
Cert ·
CompTIA Security+ ce
Cert ·
CISSP
ISC2
Service record
- Rank
- E-5
- Years served
- 2000 – 2015
- Specialty / MOS
- AE2 / 2821 / 92Y
- Security clearance
- Secret