Joe Louie Z. Corporal

CPT Operator / Network Analyst

Zyber Group LLC (Subcontractor to DecisionPoint Corporation), Lackland AFB, San Antonio, TX

September 2025 - Present

• Operate as a fully qualified Cyber Vulnerability Assessment/Hunter (CVA/H) network operator, conducting cyber threat hunting, network navigation, and tactical forensic analysis to collect valuable operational data.
• Execute defensive operations and persistent monitoring across designated networks and enclaves, managing first-level incident responses and reporting discoveries in accordance with directives.
• Utilize advanced toolsets—including Nmap, Wireshark, Elastic/ELK Stack, Arkime, Zeek, and Metasploit—to analyze network traffic, evaluate exploitation theory, and map topologies using RedSeal.
• Leverage remote access technologies (RDP, SSH, VPN) and apply security frameworks such as the Cyber Kill Chain, MITRE ATT&CK, and NIST 800 series to proactively defend computer architectures.
• Apply UNIX/Linux fundamentals and script in Bash, PowerShell, and other languages for cross-platform systems to support analytical workflows and automate defensive operations.

SOC Analyst / Cyberspace Defense Operator

US Air Force Reserve, Lackland AFB, San Antonio, TX

November 2020 - Present

• Maintain current qualification on the Air Force Cyberspace Defense (ACD) weapon system, executing critical cyberspace defense missions encompassing the prevention, detection, real-time response, and forensic analysis of intrusions targeting unclassified and classified networks.
• Defend Air Force systems across global sites against advanced persistent threats (APTs) by conducting real-time incident analysis and decisive response actions for the Air Force Information Network (AFIN).
• Triage and resolve high-severity security alerts, delivering real-time Command and Control (C2) and proactive preventative measures to ensure network integrity.
• Utilize an advanced suite of security tools for threat detection and response, including SIEM (Devo), EDR/XDR (Tanium, Microsoft MDE/Sentinel), SOAR (Splunk, XSoar), and digital forensics platforms (ENCASE).

Software Developer (DoD SkillBridge) - Cloud Application Development

Microsoft Software & Systems Academy, Embry-Riddle Aeronautical University, San Antonio, TX

January 2021 - May 2021

• Conceptualized, designed, and deployed a full-stack web application on Microsoft Azure that enabled users to identify data sets based on custom search metrics, effectively integrating C#, SQL, ASP.NET, HTML5, CSS, and Azure services.
• Engineered C# applications utilizing object-oriented programming (OOP) principles, core syntax, complex algorithms, and data structures.
• Executed backend database programming, data integration, and manipulation utilizing T-SQL and Python.
• Developed, configured, managed, and scaled comprehensive Microsoft Azure cloud solutions across SaaS, PaaS, and IaaS environments.

Linguist / Cryptologic Language Analyst

US Air Force, NSA/CSS Georgia, Fort Gordon, GA

November 2014 - November 2020

• Served as an Arabic Linguist, translating and analyzing foreign language materials to generate actionable intelligence reports for high-level national consumers and foreign partners.
• Maintained sophisticated, mission-critical database systems and authored serialized technical reports identifying adversary networks, tools, and tactics, techniques, and procedures (TTPs) for federal agencies.
• Leveraged linguistic and data mining expertise to provide critical Open-Source Intelligence (OSINT) analysis, monitoring publicly available information to identify potential threats to national interests.
• Utilized advanced analytical techniques to process complex target communications, providing actionable intelligence and real-time exploitation to significantly enhance operational situational awareness.

University of Texas in San Antonio (UTSA), San Antonio, TX

August 2024

Associate of Arts and Sciences (AAS) in Military Intelligence

Community College of the Air Force, Montgomery, AL

August 2019

Associate of Arts (AA) in Arabic Language and Literature

Defense Language Institute Foreign Language Center, Monterey, CA

May 2016

• Weapon Systems: Cyber Vulnerability Assessment/Hunter (CVA/H), Air Force Cyberspace Defense (ACD)
• Security Tools & Technologies: SIEM (DEVO Security Operation), EDR (Tanium, Microsoft Defender for Endpoint), SOAR (Splunk SOAR), Penetration Testing (Metasploit, Nmap, Wireshark), Digital Forensics (ENCASE)
• Network Security: Network Segmentation, Access Control Lists (ACLs), VPN, PKI
• Scripting & Automation: Python, PowerShell, Bash Scripting
• Development & Cloud: PHP, HTML/CSS, SQL, Microsoft Azure/AWS
• Security Frameworks & Standards: Cyber Kill Chain, NIST CSF, MITRE ATT&CK