Andre Hall Email & Phone Number

Meriden, Connecticut, Us

Meriden, Connecticut, Us

Aliso Viejo, Ca, Us

Lewisville, Texas, Us

As a member of the QA team, responsible for participating in continual testing of the TrustPipe endpoint protection solution using various vulnerability management and penetration testing tools. Develop attack test cases to utilize with in the QA automation testing framework. Consult with DevOps members to build and deploy virtual machines within vSphere and Hyper-V environments for exploitation testing Conduct security research to stay abreast of emerging threats and technologies within various attack vectors. Perform vulnerability assessment scanning duties using Nexpose, and Nessius to provide reporting of vulnerabilities within testing environments. Addressing Github issues that pertain various assigned tasks throughout each development sprint. Review Splunk and Arcsight SIEM logs for validating TrustPipe detection and block mechanisms.

Cheyenne, Wy, Us

Responsible for the implementation, deployment and maintenance of all security assets within the WCL production and testing environments.Provide pre/post sale technical support to assess clients needs as well as answers questions pertaining to security test outlines or SOWs.Worked closely with vendors to advise and conduct security testing practices throughout the product lifecycle.Required to attend information security conferences, trade shows, industry forums such as BlackHat, DefCon, B-Sides, OWASP (LA/OC), etc.Security research for emerging threats and technologies within various attack vectors.Product security testing of security hardware appliances and software technologies – next-generation firewall, SIEM, anti-virus, application control, IDS/IPS, routers, mobile devices.Write test outlines and SOWs for vendor-specific engagements as well as technical reports utilized for documentation and marketing purpose.When required, conduct proof-of-concept presentations for pre-sale engagements.

San Jose, California, Us

As a member of the Infrastructure Operations team the role of Sr. Security Engineer is to insure the confidentiality, integrity and availability of the Symantec EnterpriseVault.cloud message archiving infrastructure.Developed, reviewed, and maintained ISO/IEC 27001:2013 process documentation in support of ISMS.Conduct security awareness training sessions to educate the development and infrastructure teams on security best practices.Responsible to vulnerability assessment management of all Performed analysis and hardening of VMware vSphere architecture and deployment methodologies.Participated in weekly change management meetings and provided security-related guidance regarding configuration/patch management as well as new asset deployments.Served as subject matter expert for the deployment and implementation of Safenet LunaSA HSM appliances.Performed baseline web application security testing for the EV.cloud message archive solution using OWASP Zap and Cenzic Hailstorm.Conduct penetration tests on internal and public facing assets using tools such as nmap, Metasploit.Responsible for evaluating and recommending new security technologies to leadership teams.

Cheyenne, Wy, Us

Responsible for the operations and management of individual and group security projects in the WCL US Test Lab.Responsible for the administration and maintenance of the WCL US honeypot and honeyclient networks for the real-time security framework.Attends popular information security events to stay abreast of security trends, attacks and countermeasures – Defcon, BlackHat, RSA conferences, Virus Bulletin (VB).Responsible for duties of writing vendor sanctioned and independent test reports in SC Magazine.Acts as team leader and mentor to junior and other senior security test engineers.Works with WCL United Kingdom Lab Manager to draft test methodologies as well as devise timelines for current and future security projects.Responsible to performing independent product tests of various information security technologies such as anti-virus, next generation firewalls, anti-DDOS, vulnerability assessment management, content filtering, application control, network access control, intrusion detection and prevention appliances. These technologies are tested and assessed across multiple operating systems and platforms – server, desktop, endpoint and mobile devices.Participates in individual and group research of new and emerging security threats -devise methodologies of attack and mitigation to incorporate in test outlines.Perform internal security audits and policy enforcement for WCL US test lab.Perform role as Subject Matter Expert in various information security topics.Reports to Director of Technical Services to recommend security products and technologies for use within the local and remote labs.Involved in peer review of test data and validation of test results.Required to adhere to all requirements and guidance of the ISO 27001:2005 accreditation and implement policies into WCL internal Quality Management System.