Rick Henderson

Background

About Rick Henderson

Concierge-style Security Consultant I'm a cybersecurity professional with 19 years of experience in Information Security,(3 in Product Security) and over 20yrs in tech and education. At BlackBerry, I helped safeguard over 2 million computer endpoints worldwide. As a security response analyst, I used SAST tools (Black Duck) and vulnerability feeds to assess a wide variety of Open Source projects and internally developed EDR and EPP solutions (and kind of a SIEM thing!) for reported vulnerabilities. I prioritized vulns by comparing CVSS scores, CVE assessments, severity, business impact, and likeliness of exploit. I'm a believer in reading code to see how things work.(Deep breath, almost done.) Responding to customer queries, I went looking for IOCs (typically file hashes and malware behavior), reading threat research analyses and news articles to find out what it did via OSINT, and exploring VirusTotal. I wrote POCs, and tested it against our EDR and EPP solution, often handling and detonating malware is a safe and responsible way. POCs were often scripted in Python, Excel VBA, or coded in C# following Red Canary Atomic Red Team paired with MITRE ATT & CK categories. Or C/C++. Assembly friendly but we're not that close yet. I performed threat hunting in live environments using SQL in Databricks. I worked with MDR analysts and Threat Research to ensure high quality detections. I utilized the findings to create dozens of mission critical malware detections to government, financial, and healthcare institutions around the world. My current interests lie in vuln management, cyber threat intelligence (CTI), operational/strategic intelligence ‍, malware analysis, and product and app security but I can provide critical thinking and problem-solving by applying my skills to SOC or related positions. 🤗 Fun fact! I studied magic being a member of the #InternationalBrotherhoodofMagicians, and studied Chinese martial arts (wushu specifically) with Grandmaster Pan Qing Fu before his passing. And I like lockpicking. And physical penetration testing / covert entry is super interesting. AI friendly. Typography geek.