Andrew Winkelmann Email & Phone Number

Dublin 2, Ie

Dublin 2, Ie

Dublin 2, Ie

Dublin 2, Ie

Currently work as an Information Security Consulting Manager in the Cloud Security Group at Accenture. Working for a leader in Information Technology industry has always been a goal of mine. Public Cloud e-commerce Cloud Reference Architecture Project:Security Team Lead on POC sponsored by large Cloud Service Provider and Accenture for deploying ecommerce solution with newly released Microsoft Azure ARM features (automation, RHEL servers, UDR, etc.). Public Cloud ecommerce deployment for Fortune 500 Company:Security Transformation Lead for over a dozen resources and deploying client’s e-commerce solution in the Azure Public Cloud Platform. Managed the deployment of multiple security tool that had never been deployed on the Azure Public Cloud Platform. Public Cloud Digital deployment project for Fortune 500 Company:Security Team Lead and Cloud Security Platform Lead for very large restaurant corporation that Accenture hired to move platform into the Public Cloud. Other Security Experience:Led security team for deploying and securing both AWS and Azure Public Cloud deployments. Solution, tested and implemented next generation security tools for securing the Public Cloud. Fully revamped INFOSEC program at large financial company including new polices, procedures and documents. Fully deployed and configured over a dozen security technologies from the ground up.Lead for the PCI audits for four different financial companies. Collected documentation for compliance on all 12 PCI Requirement Domains, and worked with PCI QSA for passing audits.

Just started the new job. Working on a wide range of Vulnerability Management related projects. More details in the future!!

I was the primary or secondary Security Engineer that analyzed, designed, deployed, and mobilization for run state on 15 plus security devices at primary company and three of its subsidiaries. Penetration testing- Performing internal penetration testing using tools like Metasploit, SAINT, Backtrack(and more recently Kali Linux). This along with the usual scanning using Qualys, Nessus, etc.PCI DSS - Changed our whole PCI scans around to satisfy new PCI 2.0 requirements. Examples of this being all PCI vulnerabilities 4.0 CVS score and above need to be re-mediated(Or documented as an exception). Also help gather the PCI documents for auditors.Patch Management - Fully deployed Altiris Patch Management system from the ground up. Creating policies, deploying agents, staging patches, etc. Most importantly, I automated 90% of the process for finding unmanaged workstations get agents installed, and get patched without any human interaction.Anti-virus - Fully redeployed our antivirus solution after upgrading to the latest version. E Very well versed in the most popular antivirus products like McAfee ePO, Symantec Endpoint Protection and Microsoft Forefront Protection and Forefront Protection for Exchange. Also changed vendors and deployed a brand new antivirus protection for HP-Thin Clients.SPAM - I work with an enterprise SPAM protection product on a daily basis. Fully deployed FireEye Advanced Malware into production which included the MX module for email attachment scanning.Data Loss Prevention(DLP) - Completed the setup of our DLP product.. Interceptors, sensors, endpoints, etc. Created fully customized policies that align with our companies business needs. This helps keep all sensitive company data safe. Basic knowledge of Cisco ASA's. Experienced on Palo Alto Layer 7 firewalls. Also Eexperience in deploying proxies and web filtering.

Seattle, Wa, Us

Exchange Systems Engineer having managed millions of mailboxes around the world. From 200 seat companies to 200k + seat companies in the BPOS-S/Office 365 Solutions. Engineer level focusing on high quality incident resolution, root cause analysis, prevention, and knowledge transfer. Mentored incoming engineers and made decisions based on the incident severity and potentials impacts. Very well versed Microsoft technologies deployed in an Enterprise environment and a Cloud Services environment such as Microsoft Windows Server 2003 & 2008 R2, Microsoft Exchange 2007 & 2010, all Microsoft Windows desktop Operating Systems, Active Directory (architecture design and troubleshooting), and Microsoft Exchange High Availability Technologies (server clustering and redundant storage volumes). Solid understanding of client/server, networking, other Messaging applications such as but not limited to Microsoft Internet Information Services(IIS), ActiveSync/Windows Mobile Client technology, Exchange PowerShell, TCP/IP, SMTP, RPC over HTTP, SSL and other protocols including use of troubleshooting tools - scripting, resource kit diagnostic tools, packet sniffers and\or Netmon/Wireshark.

Seattle, Wa, Us

Completely revamped the Vulnerability Management Program for PEMCO Insurance and also PEMCO Technologies(PTSI). Tracked and remediated many different vulnerabilities along documenting many different PCI documentation, SEE BELOW:Risk Management: Protected vulnerable networks following detailed risk assessments. Guided cross-functional teams to implement new procedures that closely assigned with the policies that were set in place to keep a secure environment. Creating potential cost / benefit charts and potential breach costs helped cement this Information Security awareness.Vulnerability Scanning and Remediation: Set up custom scans from IP 360 and Rapid 7 scanners to get accurate scan results and open tickets for remediation. Also used external subscriptions (US-CIRT, FrSIRT, and ISA) to find vulnerable OS and software that needs patches, hotfixes, service packs to remediate potential vulnerabilities.Compliance: Investigated vulnerabilities for applicability and opened tickets for remediation. Helped create Information Security Policies and Standards. Ran Vulnerability Management Meeting once a week with different departments to get updates on security related deployments, projects, etc. Also took meeting minutes and sent them out to all participants. Made vulnerability documents for Sr. leadership. Tracked all vulnerabilities in Collaboration Portal for the Auditors (PCI compliance experience).

Bartender at one of the busiest bar and restaurant in Ellensburg, WA. This included serving food and bartending for drinks from the restaurant or in the bar. Learning and demonstrating world class time management, multi-tasking, customer service are many of the skillsets used during my bartending job while attending college.

Ellensburg, Washington, Us

Helped with IT based questions, mostly regarding Microsoft office. Also helped create new database queries for entering different categories for judging at the Fair. Also helped customers and Fairground board members.