Benham Haynes

• Respond to security incidents using Huntress, ESET, and Barracuda: lock down compromised accounts, investigate scope, and deliver incident reports to clients.
• Administer Microsoft 365, Entra ID, Intune, Exchange Online, and Google Workspace across client tenants, including user lifecycle, dynamic distribution groups, and Copilot policies.
• Configure and manage SonicWall and Fortinet (FortiGate, FortiCloud) firewalls, Ruckus and MikroTik access points, and IPv6 hardening on client networks.
• Integrated a customer phonebook into GoTo Connect and built a GoTo wallboard TV display for live call queue visibility.
• Ran Gophish phishing simulation campaigns for client security awareness training.
• Provide end-user and remote support through NinjaRMM, Tactical RMM, and RepairShopr; track assets in Snipe-IT and manage credentials in Keeper.
• Manage Apple Business Manager and Verizon Business accounts for client device fleets.

• Supported a small office network, workstations, plotters, and peripherals.
• Handled scheduling, client communications, invoicing, and check processing.

• Built and retained a personal client base through consultation and consistent service in a fast-paced salon.

• Audited retail locations nationwide against company and regulatory standards and delivered training to close compliance gaps.

• Ran daily operations, trained staff, and handled cash and inventory control.

• Designed and built a privacy gateway for an AI help-desk agent that replaces real customer identifiers with reversible pseudonyms before any external-model request, irreversibly redacts secrets, and fails closed when it cannot prove a request is safe, so the external model never receives live customer data.
• Added schema-aware sanitization for ticketing and new-user provisioning data, reversible restoration only at approved local boundaries, and privacy audit logging of every outbound request.

• DIY WiFi Pineapple on a GL-AR300M router running OpenWrt and PineAP, built for club wireless security demos. Full build log and defensive hardening write-up at xpop3.github.io.

• Segmented attack network on its own bridge with Parrot OS and Metasploitable targets for penetration testing and Active Directory exploitation practice.
• SonicWall TZ500 gateway, UniFi AP, AdGuard Home DNS filtering, and a WireGuard VPN gateway in LXC containers, Tailscale for remote access.

• Built an onboarding automation app with Power Apps and Power Automate that standardizes account provisioning across Microsoft 365 and Entra ID, cutting repetitive manual setup for every new user.

• Designed and deployed a guest WiFi captive portal with SMS sign-in across cloud-managed access points; diagnosed and fixed a sign-in failure caused by a MAC/IP encryption setting conflict between the portal and the AP controller.

GPA 4.0, Summa Cum Laude · Certificate of Achievement, Security Analysis