Amanda Mullens Mazzaro Email & Phone Number

Stafford, Virginia, Us

Davis, California, Us

Led the creation and implementation of a comprehensive information security framework, safeguarding digital assets while ensuring compliance with HIPAA, ISO standards, and other relevant regulations, fostering a pervasive security culture. Collaborated with business and tech leaders to assess risks, develop effective mitigations, and define security performance indicators. Conducted security awareness programs, engaging stakeholders to institute a comprehensive security approach. Regularly presented insightful reports to executives, managed the information security budget, and orchestrated a long-term technology roadmap aligned with business strategies. Oversaw technology solution development, ensuring alignment with security and strategic goals, providing strategic guidance to executives, and continuously monitored system performance for efficiency and security enhancements. Managed onboarding/offboarding using Microsoft Entra and implemented Jira automation for HR, Finance, and Procurement while maintaining robust security settings across company tools.

Cary, Nc, Us

Led the establishment of a Security Operations Engineering team responsible for managing security software configurations, from deployment to continuous updates. Supervised a team of 5 Operations Engineers and a 12-member Security Operations Center (SOC), ensuring 24/7 monitoring and escalation support. Introduced annual tabletop exercises to evaluate adherence to the Incident Response Plan (IRP) and conducted meticulous MSA security reviews for Legal prior to contract agreements. Assessed software and vendors for security compliance during pre-business agreement stages and implemented procedural documentation for swift and effective responses to security incidents. Collaborated cross-departmentally to implement a comprehensive incident response process, refining procedures and tools across the company for heightened security preparedness.

San Jose, Ca, Us

Led the creation and leadership of a comprehensive defensive security team comprising SOC, DFIR, Threat Intelligence, and Vulnerability Management units. Identified and nurtured high-performing talents, facilitating their progression into managerial roles within the team. Oversaw a staff of 15-18 members, holding regular meetings and quarterly anonymous surveys to assess performance and leadership. Conducted annual performance reviews, recommended stock and merit increases, and managed reviews for contracting companies. Acted as the primary escalation contact for significant security incidents impacting customers. Developed robust vulnerability management policies, aligned SLAs with corporate security policies, and integrated risk analysis into weekly CISO briefings. Analyzed industry-reported incidents, assessed attack surfaces, and provided remediation recommendations. Offered guidance on vendor engagements, project ownership, and established performance metrics and on-call rotations. Implemented tracking tools, conducted documentation reviews, and led architectural assessments for new features. Additionally, represented Security for Change Control Board, documented emergent threats and benefits of new technologies, defining machine learning and automation use cases, while implementing access control procedures to minimize risk surfaces.

San Jose, Ca, Us

Functioned as a pivotal liaison bridging the Security Business Group with internal teams such as S&TO, Data Protection & Privacy, Product Security Incident Response Team, InfoSec, Legal, and Communications staff. Managed SOC participation in rigorous audits like SOC2 and FedRAMP, supplying crucial documentation and exhibiting security capabilities during interviews. Generated comprehensive monthly security reports encompassing access control reviews, SIEM data snapshots, and evidence supporting software/hardware updates. Identified essential security testing requirements for audits, supported compliance initiatives, and meticulously reviewed penetration test findings to track remediation progress. Created and managed Jira dashboards for leadership to oversee audit findings and associated risks, while spearheading implementations of security tools for SOC monitoring. Directed security incident responses, delivering executive summaries, root cause analyses, and retrospectives to leadership. Collaborated with teams to develop automated testing tools, integrated defect tracking systems, and crafted Jira workflows for vulnerabilities and incidents. Promoted a culture of security awareness across teams, advocating for the integration of DevSecOps practices within engineering groups' development lifecycles.

San Jose, Ca, Us

Managed and authored advisories for significant Cisco products like Cisco WebEx, Cisco Umbrella, and Meraki, conducting comprehensive CVSSv3 scoring analyses to assess vulnerability severity. Functioned as a direct liaison among Cisco PSIRT, InfoSec, and Cisco WebEx engineering teams, swiftly addressing reported vulnerabilities. Provided executive summaries and best practice recommendations to Cisco PSIRT management and product teams while contributing to the establishment of a comprehensive Cisco Cloud Security posture for transparent communication of cloud vulnerabilities to customers. Oversaw critical incidents impacting Cisco WebEx browser plug-ins, addressing issues across Chrome, Firefox, and Internet Explorer/Edge in 2017. Additionally, played a crucial role in reviewing and developing documentation for new hire processes, queue management, and advisory protocols, contributing significantly to wiki development.

San Jose, Ca, Us

Managed the creation, review, and publication of documentation detailing vulnerabilities in third-party software, ongoing attack methodologies, and security advisories specifically for Cisco products. Oversaw the generation and upkeep of content for the Cisco security blog, ensuring its accuracy and relevance in addressing pertinent security concerns and updates.

San Jose, Ca, Us

Delivered comprehensive assistance to Department of Defense and Intelligence agency clients, providing consistent and detailed reports while acting as their primary escalation point for emergency or after-hours support. Played a pivotal role in representing client interests during crucial corporate discussions, ensuring their perspectives were accurately conveyed and considered in matters that could impact client operations significantly.

New York, Ny, Us

Conduct comprehensive analysis of internal processes, focusing on enhancing efficiency by streamlining escalation paths, developing tools, and reviewing documentation. Responsible for creating and maintaining Confluence Wiki Webspace for process documentation, engaging with vendors for issue updates, and suggesting process improvements. Active participation in engineering meetings discussing NOC support, procedural development, and change management approvals. Additionally, perform weekly reviews of syslog data, collaborate with tool teams to refine processes, act as the escalation point for various issues, and provide detailed data analysis for post mortem reports following major network outages. Furthermore, coordinate with asset management teams for accurate asset location records, offer training to hardware teams at US data centers, facilitate training sessions for NOC analysts and management with internal and external parties, and oversee the relocation and hardware updates for the NOC training lab.

New York, Ny, Us

Created a comprehensive Shift Report for NetOps NOC, incorporating actionable tickets, maintenance schedules, and leave notifications. Implemented a standardized template for maintenance window requests, ensuring uniformity and efficiency. Conducted monitoring and troubleshooting for global route switch network hardware, handling short and long haul circuit troubleshooting. Acted as the point of escalation for vendors and internal engineering groups, updating internal trouble tickets in the Remedy ticketing tool and overseeing Change Management maintenance windows.

Master Of Business Administration (M.B.A.)

Master’S Degree, Cybersecurity

Bachelor Of Science - Bs, Information Technology