Alex Stanford Email & Phone Number

Jacksonville, Fl, Us

Newtown, Pa, Us

Responsible for program leadership, strategy and delivery within the EPAM information security practice, working with Fortune 100 clients to boost the maturity of security programs.

Bethesda, Md, Us

Member of the exclusive GIAC Advisory Board for more than a decade.

I developed software solutions for and bootstrapped a landscaping company. Achieved higher efficiency and margins, lower risk, simper operations, and faster growth than competitors. Leveraged technology within the business strategy, recruited senior team, coached servant leadership and lean and agile methodologies.

2021 was a challenging year for my family and I as we were displaced while going through our first (1 month turned 8 month) home remodeling project. We faced the flooding of our home and ruination of much of our belongings but also welcomed the wonderful blessing that is our second daughter (in less than 2 years) to the world. 2022 was decidedly a time to focus on family and pursue personal goals.

Jacksonville, Fl, Us

I was responsible for creating system security infrastructure for a multi-billion-dollar workers compensation servicing company with ~3k employees. Lead security architecture and teams totaling 13 roll-ups within security operations and security engineering. Develop and implement KPIs and analyze benchmarks and roadmaps, communicating progress to senior leadership and stakeholders. Serve as a key leader for HiTrust and SOC 2 audits, penetration tests, assessments, and resulting mitigation efforts. Highlights of accomplishments in this role include:* Built a risk-based application security program and led a training program for developers to properly use the program. * Architected enterprise information security program, leveraging a cross-referenced matrix of frameworks including HiTrust CSF & NIST CSF.* Proposed and led the implementation of CIS Top 20 Critical Security Controls. * Led cross-functional teams to create both a secure cloud adoption and remote working strategy, enabling a secure hybrid working environment.

Jacksonville, Fl, Us

Responsible for leading security architecture, engineering and operations, and developing the risk management process. Established the information security strategy and roadmap and gained senior leadership buy-in to execute throughout 2022. Hired and managed an additional 10 security analysts and engineers to enable business objectives.Highlights of accomplishments in this role include:* Reduced vulnerabilities by 80%, partnering with cross-functional teams to launch a NIST-aligned Patch & Vulnerability group. * Developed and automated robust reporting of vulnerability findings across the enterprise. * Improved SOC response metrics by 60%; improved email security and phishing detection efficacy.* Architected technical projects including cloud DMZ implementation and TLS 1.0/1.1 deprecation.* Established enterprise procedures to manage and deploy internally developed software in partnership with application development leadership and stakeholders; resulted in cost savings, and improved security posture.

Jacksonville, Fl, Us

Here, I was responsible for strategizing, road mapping, budgeting, and launching an application security and DevSecOps program for the organization. Proposed, implemented, and launched the company’s first secure development training initiative, which achieved 100% completion by ~100 developers, reducing security flaws and improving risk awareness and security culture.

Jacksonville, Florida, Us

At VyStar, I led a cross-functional agile team of 12, tasked with developing and implementing core transactional software. In addition to leading development of a core project, identified vulnerabilities, coached development team on application security, wrote secure development guidelines, and served as an author and curator of coding guidelines, development documentation, and deployment processes.Highlights of accomplishments in this role include:* Led company evolution from legacy system to MISER Desktop, transforming the experience of employees through automation and improved user interaction, and resulting in higher productivity, reduced risk, improved customer service, and lower costs for the organization. * Customized MISER Desktop system to meet the company’s needs by writing a JavaScript framework and developing 40+ workflows (some of which were previously deemed impossible by software’s creator). * Created a new standard for projects by implementing Git version control with a branching strategy in concert with Azure DevOps CI/CD. * Developed a single, cohesive system to perform banking operations reducing complexity for front-line workers leading to greater efficiency improvements, led vendor selection process and vendor communications to determine technical capabilities against organizational goals.

Rockville, Maryland, Us

At SANS, I was responsible for full-stack development, application security, security research, and data analytics for SANS Institute’s research division. Served as architect and engineer of a custom, highly secure web application framework that replaced the legacy system. Built custom development projects that emphasized application security.

Rockville, Maryland, Us

Served as an assistant instructor at Cornell University and published widely cited information security news/articles on behalf of SANS Institute.

Jacksonville, Florida, Us

I bootstrapped a software consulting agency using lean agile practices. Architected a fully functioning CDN and hosting company, innovative DNS security monitoring system, performed application security assessments on client solutions and developed custom software for clients. Grew quickly to employing a small team at offices in Jacksonville, FL.

Served as a web development consultant and solution architect, working with clients from concept to production. Built custom e-commerce solutions and NetSuite integrations as a full-stack developer. Performed all front-end development for the firm.

Relocated to Jacksonville, FL and performed freelance web development and server/application hardening work remotely for a variety of clients. Windows, Linux, IIS, Apache, PHP, Perl, MySQL, JavaScript (AJAX/JQuery), HTML, CSS, various APIs/frameworks

Us

Lead Developer of the redesigned company website for this Internet Service Provider and datacenter, and the website was in use for over a decade. Completed various other internal web development projects as well. Windows, IIS, .NET, C#, JavaScript, HTML, CSS

Performed web development for a wedding-focused social media startup on a full-time remote contract basis. Linux, Apache, PHP, MySQL, JavaScript (AJAX/JQuery), HTML, CSS