Will Paetsch

Versatile and collaborative cybersecurity leader driven by a passion for continuous learning and all facets of the security landscape. Combines strong team leadership capabilities with exceptional, on-the-fly presentation skills to effectively engage and align both technical and executive audiences.

Principal Threat Analyst at Optiv (2025-01 – Present)

• Matured Security Operations Center (SOC) for clients, building the team, processes, and collaborated on technology stack development to deliver an enterprise-grade security monitoring and incident response capability.
• Established and oversaw comprehensive QA frameworks across multiple analyst teams, driving a measurable increase in alert fidelity and standardizing intelligence reporting across the enterprise.
• Engineered custom tuning strategies across client SIEM/EDR platforms, achieving a 96% reduction in false positive alerts and reducing total alerting volume (8k to <300/mo) and significantly increasing SOC analyst efficiency.
• Cultivated a strong, collaborative relationship with SIEM and SOAR engineering by directing efforts to reduce analyst fatigue by bringing the needed investigative information up to the front.
• Authored and deployed comprehensive Standard Operating Procedures (SOPs) and playbooks for advanced threat analysis operations, integrating continuous improvement frameworks to fine tune automated workflows and tactical incident response protocols.
• Coached nine high-performing teams of security analysts through structured professional development, translating complex tactical concepts into actionable skill progression.
• Analyzed adversary tactics, techniques, and procedures (TTPs) through the lens of the MITRE ATT&CK framework and Cyber Kill Chain to develop high-fidelity SIEM alerts and automated SOAR playbooks, significantly reducing mean time to detect (MTTD).

Senior Threat Analyst/CSIRT at Optiv (2023-06 – 2024-12)

• Has expertise with a diverse range of cybersecurity tools and platforms for large enterprises, including: Threat Detection & Response (SIEM/EDR/XDR), Infrastructure & Network Security, Threat Intelligence & Analysis (OSINT), Identity & Access Management (IAM), Governance, Risk & Compliance (GRC), Security Automation & Operations (SOAR/ITSM), Digital Forensics and Incident Response (DFIR), Email Phishing Analysis
• Working knowledge with a variety of query languages to include KQL, CQL, SPL, REGEX, Python, PowerShell, and BASH.
• Managed the end-to-end incident lifecycle for critical escalations, ensuring strict adherence to compliance mandates and internal Service Level Agreements (SLAs).

Senior Cyber Threat Intelligence Analyst at DefendEdge (2022-07 – 2022-12)

• Conducted threat analysis for 20+ clients using SIEM, NGFW, and log analyzers, while mitigating a major breach in collaboration with the FBI IC3, FCC, and other agencies.
• Utilized Fortinet security solutions, W/Secure for vulnerability scans, and open-source research tools like Shodan, Urlscan.io, and Bright cloud.
• Identified and reported on emerging cyber threats and vulnerabilities.

Senior Intelligence Analyst (Senior Master Sergeant- Ret) at U.S. Air Force (2002-06 – 2022-07)

• Was the designated principal analyst for all intelligence reporting, leading final QA reviews and approving all products for publishing to the intelligence community.
• Led a 20-person multidisciplinary intelligence and signals analysis team.
• Served as an NSA National Cryptologic University instructor and certifier for network exploitation courses.
• Spearheaded project to certify the organization in intelligence product creation, dissemination, and reporting management.

Master's Degree in Information Security Engineering – SANS Technical Institute (2028)

Master's Degree in Information Sciences – Pennsylvania State University (2020)

Bachelor's Degree in Information Systems Security/Enterprise Security Focus – American Military University (2016)

Post-Baccalaureate Certificate in Information Systems Cybersecurity – Pennsylvania State University