Information Security Program Development:• Matured client’s security posture with IaaS, PaaS, and SaaS solutions in public cloud environments.• Remain abreast of the latest security technologies, trends, and threats to enhance security measures and protocols.• requirements, ensuring compliance with diverse regulations, standards, and frameworks such as NIST, NERC, HIPAA, PCI, NRC, ISO, and MITRE ATT&CK.• Conducted security assessments of enterprise environments, identifying vulnerabilities and implementing effective mitigation strategies to enhance overall security posture.• Architected & deployed solutions aligned with service-oriented architecture (SOA) principles to support business-critical services.• Design and establish criteria and parameters for key data protection areas: Data Loss Prevention (DLP), Data Retention, DataPrivacy, Data Classification, Compliance, and User Training.Information Security Engineering Leadership:• Strong Communicator and Effective Team Leader with excellent customer service skills.• Lead and guide cross-functional teams in identifying and evaluating significant security risks and vulnerabilities, with a focused effort on resolving key issues.• Collaborate with stakeholders to gather requirements, understand business needs, and fine-tune data protection policies for optimal performance and compliance• Develop and implement sensitivity labels to classify and protect data according to its sensitivity and regulatory requirements.• Design and deliver comprehensive user training programs, ensuring all employees are well-versed in data protection policies and best practices• Collaborated with cross-functional teams to integrate security best practices into cloud and DevOps strategies, ensuring seamless cloud service delivery.• Assess and implement robust security controls aligned with industry best practices and regulatory standards to fortify defense against cyber threat

Cloud Security Engineer:• Subject matter expertise with Microsoft Azure, Microsoft Purview and M365 Security Center• Provide expertise in the implementation of the company’s comprehensive Data Protection framework using native cloud DLP solutions, ensuring robust data security across all departments.• Developed and maintained secure DevOps pipelines using Infrastructure as Code (IaC) with Terraform and PowerShell, driving automation and enhancing security posture.• Oversaw and optimized CI/CD pipelines and DevSecOps processes, enhancing security integration throughout the software development lifecycle.• Led the design and deployment of secure, scalable infrastructure on Azure, integrating cloud-native services with M365 security controls such as Defender for Cloud and M365 DLP.• Utilized scripting languages such as PowerShell and Terraform to automate cloud security processes, improving operational efficiency and reducing manual intervention• Expertly managed cloud Identity & Access Management (IAM) configurations, including SSO, OAuth, OpenID, and SAML authentication mechanisms, mitigating risks and ensuring regulatory compliance.Security Operation Center Analysis:• Pioneer and resolve a critical security incident to minimize damage and prevent any breach of sensitive data. • Advocated for 24/7 Tiers 3 and 4 support to Security Operations Centers, enabling prompt incident response.• Triage alerts and Incidents through Azure Threat Modeling to determine action needed. Conduct data discovery to find unclassified files and documents.• Analysis of email and user behavior to ensure protection against phishing attacks.• Monitor internal compliance alerts related to DLP rule matches within MS Purview.

• Executed the implementation, operations monitoring, troubleshooting, and maintenance activities associated with CenterPoint Energy’s Smart Grid Network and point to point dedicated circuitry• Repaired multiple communications circuits, which failed to meet specifications through systematic troubleshooting• Provide operational control and technical supervision over designated communication facilities equipment modifications• Executed the implementation, operations monitoring, troubleshooting, and maintenance activities associated with CenterPoint Energy’s Smart Grid Network and point to point dedicated circuitry • Repaired multiple communications circuits, which failed to meet specifications through systematic troubleshooting • Provide operational control and technical supervision over designated communication facilities equipment modifications Perform complex technical end-to-end testing on US military Global Information Grid (GIG) and control communication circuitry. Analyzed & test data to ensure compliance with required specifications for acceptance of the circuitry into the GIG. Perform complicated repairs of GIG circuits which have failed to meet the US military installation specifications through systematic troubleshooting. Perform installation of communication transmission systems and data/voice communication circuit in highly secure military facilities in accordance with Defense Information Systems Agency (DISA) engineering plans. Perform complicated repairs of communication circuits to effect integration or restoral into GIG. Provide direct Tactical Communication Contingency Support by interfacing communication systems and circuitry into the deployed US Military tactical environment. Provide operational control and technical supervision over designated US Military GIG Satellite, and other communication facilities equipment modification.

Key Responsibilities:Strategic Leadership: Drive the overarching vision and strategic direction of L7 Consulting Services Inc., ensuring alignment with our mission and values.Business Development: Identify and seize new business opportunities across various industries to expand our market presence and service offerings.Diversity & Inclusion Advocacy: Promote a diverse and inclusive workplace, supporting minority and veteran communities through meaningful employment and training opportunities.Operational Management: Oversee the operations of L-7 Technology Inc., L7 Luxury Travel Advisors, and our cybersecurity training school, ensuring seamless integration and exceptional service delivery.Industry Expertise: Stay ahead of industry trends and technological advancements to provide cutting-edge solutions and services.Networking & Partnerships: Cultivate strategic partnerships and networks to enhance our business reach and impact.Mentorship & Training: Lead initiatives to train and mentor veterans, equipping them with the skills needed to thrive in the cybersecurity industry.About L7 Consulting Services Inc. Entities:L-7 Technology Inc.: Specializes in delivering innovative IT solutions and services that drive digital transformation for businesses.L7 Luxury Travel Advisors: Offers bespoke travel experiences, providing luxury travel planning and personalized itineraries for discerning clients.Cybersecurity Training School for Veterans: Dedicated to empowering veterans by providing comprehensive training programs designed to transition them into successful cybersecurity careers.

• Recruited as Senior Cybersecurity Engineer charged with the design, deployment, and administration of security solutions utilizing a range of tools including SaaS Alerts, SentinelOne, Safetica, CyberCNS, ConnectWise Managed Engine, and Microsoft Azure Cloud Security/Office 365/Defender XDR/Sentinel/Purview.• Leverage expertise in Security Information and Event Management (SIEM) technologies and User and Entity Behavior Analytics (UEBA), with a dedicated focus on enhancing security monitoring and incident response capabilities continually.• Perform comprehensive security assessments and audits to pinpoint vulnerabilities, devising strategic solutions to mitigate risks effectively.• Foster collaboration with IT and interdisciplinary teams to integrate cybersecurity protocols into our digital infrastructure.• Keep abreast of evolving cybersecurity trends and technologies, ensuring Meriplex remains resilient against emerging threats.• Spearheaded cybersecurity awareness training initiatives, equipping employees with the knowledge and skills to identify and thwart security breaches effectively.• Assist in developing and implementing Data Protection rollout for Fortune 500 company of 2500 employees. Involved in creation of• MS Azure Information Protection DLP Policies and Rules. Test all DLP policies prior to turning them on. Created label criteria for classification of all documents.• Policies and Labels included Confidential, Restricted, Internal, Public.• Assist with policy tuning to determine false positives.• Monitor internal compliance alerts related to DLP rule matches within MS Purview.• Analyze Email & Collaboration reports within MS Defender.• Triage alerts and Incidents through Azure Threat Modeling to determine action needed. Conduct data discovery to find unclassified files and documents.• Utilize Purview to see Data Loss Prevention and Information Protection overview.

• Spearheaded initiatives to seamlessly integrate SIEM and UEBA tools, including Exabeam, AT&T USM Anywhere, AlienVault, Splunk, Azure Security (Sentinel/Defender XDR, Purview) AWS Security, Identity, & Compliance through collaborative efforts with cross-functional teams.• Led the establishment of Azure Cloud environments for organizations, ensuring both efficiency and security of infrastructure.• Advocated for 24/7 Tier 3 and 4 support to Security Operations Centers, enabling prompt incident response.• Developed and maintained Azure security standards and best practices, ensuring alignment with relevant compliance requirements and industry regulations. Conducted comprehensive security audits to identify vulnerabilities and implement necessary measures to mitigate risks.• Drove security measures and minimized 37% of threats that refined overall security posture and protection of sensitive data.• Elevated Security Operations Center (SOC) workflow by uplifting effectiveness.

Engaged in researching and evaluating emerging technologies to understand capabilities of required systems or networks and provide system security consultation and engineering to business owners, system owners, and developers.Managed Data Center transition to Azure Cloud infrastructure.Engineered Network Security groups, policies as code, and web-based Firewall applications.Performed as the Subject Matter Expert for Next-Gen SIEM / UEBA integration (Exabeam, AT&T USM Anywhere \AlienVault, Splunk, McAfee, ManageEngine)Assisted leaders with decision-making and actions related to design and implementation of cybersecurityMaintained security process coordination within the Department's lifecycle management and governance processesPlanned and oversaw configuration changes for Checkpoint & Fortinet security infrastructure platforms.Applying cybersecurity functions (e.g., encryption, access control, and identity management) to reduce exploitation opportunities, Support projects that achieve organizational goals, building opportunities for collaboration to promote innovationParticipates in periodic information systems risk assessments, preparing technical requirements and standards to ensure the achievement of organizational goalsDevelop detailed proposals and plans for new information security systems that would enhance or enable new capabilities for network or host systemsDevelop detailed knowledge and responsibility transfer plans with appropriate documentation for long- term support teamsInterface with business and IT partners to drive security enhancement and implementation efforts, serves as a participant in emergency response team activities for responding to various security incidents

Designed, build, Install & managed cybersecurity systems for critical infrastructures to meet regulations and standards defined by the United States Nuclear Regulatory Commission. Solutions include, Checkpoint, Fortinet, Cisco Firewalls. IDPS, Next-Gen & Legacy SIEM appliances, Windows Servers, Data diodes for one-way information communicationDetect security issues, create customer tickets and manage problems until closureDisk/File Encryption, Data Loss Prevention, Enterprise Rights ManagementCentralized management of Anti-Virus software.Performed maintenance and support of McAfee ePO, Symantec, Carbon Black and Microsoft security productsConfigured and managed virtual environments (VMWare), including hosts, operating systems, SAN storage(NetApp) and network infrastructure.Participate in enterprise level security audits and successfully resolve findings using industry security best practices

"Command and Control Security SystemsFully integrated hardware and software systems for critical infrastructureThe threat of attack on critical infrastructure, both physical and cyber, is increasing and becoming more complex every day. The facilities, agencies and services we rely on to keep us moving, safe, connected and informed need the most advanced situational awareness. Rockwell Collins’ command and control systems integrate the latest technology to help protect critical infrastructure around the world, from nuclear power plants, airports and mass transit to military and government facilities.Provides support to areas such as research, design, development, test, manufacturing or process improvement. Perform as a member of a technical team utilizing effective communication skills. Utilizes routine test or diagnostic equipment. Participates in developing new approaches and techniques to achieve continuous improvement in all work processes. Documentation of job specific activities such as electronic design, modifications, data collection, calibration, and Design of Experiment data. Able to utilize schematics, procedures, engineering drawings, and follow written/verbal instructions, including test procedures. Operate in accordance with corporate, operations, and division policies, procedures and practices in compliance with accepted business ethics. Adheres to all applicable environmental, safety and health procedures. May perform other tasks as requested by leadership within applicable Rockwell Collins guidelines Applies electronic theory to lay out, build, test, troubleshoot, repair and modify electronic products.

Analyzed computing and network security design to determine optimum placement for security technical controlsDesigned, integrated, and configured cybersecurity controls for government entitiesDefined and developed requirement sets to mitigate gapsEvaluated intrusion detection/prevention and data loss prevention tools for applicability and effectivenessPerformed initial event/loss assessment and validationActivated and assisted with incident responseDocumented anomalies, monitors usage/action taken, performed trend analysis and recommended actionsDeveloped and maintained security infrastructures and programs in accordance with established agency policies and proceduresImplemented agency compliance with PCI-DSS Security Standards/NIST 800- 53Designed security controls based on information assurance (IA) principles and tenetsConduct vulnerability scans, recognized vulnerabilities in security systems, and design countermeasures to identify security risks

Oversaw the satellite distribution of the FOX Regional Sports Networks and the FOX Cable Networks platformsProvided technical support and customer service to Cable Head-end Technicians for all 60 FOX networksDesigned & Scheduled daily programing for local networksPerformed troubleshooting on the network systemsTroubleshoot issues with broadcast systems to resolve problems quickly to minimize downtime.Installed and configured broadcast software to optimize performance. Selected sources from which programming would be received or through which programming would be transmitted.Coordinated with engineers and producers to ensure effective operation of broadcast systems.Provided network support services for devices such as hubs, bridges, routers, and other hardware.

Perform complex technical end-to-end testing on US military Global Information Grid (GIG) and control communication circuitry. Analyzed & test data to ensure compliance with required specifications for acceptance of the circuitry into the GIG. Perform complicated repairs of GIG circuits which have failed to meet the US military installation specifications through systematic troubleshooting. Perform installation of communication transmission systems and data/voice communication circuit in highly secure military facilities in accordance with Defense Information Systems Agency (DISA) engineering plans. Perform complicated repairs of communication circuits to effect integration or restoral into GIG. Provide direct Tactical Communication Contingency Support by interfacing communication systems and circuitry into the deployed US Military tactical environment. Provide operational control and technical supervision over designated US Military GIG Satellite, and other communication facilities equipment modification.

• Installed, operated, and maintained mobile subscriber equipment, satellite, line of site antenna, high frequency radios, fiber optics, and Microwave Antennae Systems valued at over $10M with no property loss• Provided voice and data communications for mobile and stationary customers/subscribers• Erected 9meter (m), 15m, 30m, and 100m mast RF/Microwave antennas, fiber optics, and coax cables from line of site antennas to various shelters with no incidents• Performed successfully in numerous real world missions during Operation Iraqi Freedom; served as the Team Chief in the Transmission Section of Inter nodal network, an operator in a Small Extension Node (SEN) system, and an operator of a Random Access Unit (RAU)• Drove success through proficient efforts in managing firewalls, intrusion detection and prevention systems• Utilized test measurements, diagnostic equipment, test program sets, and interactive electronic technical manuals to determine the cause of malfunctions and extent of faults