• Managed phishing programs for small and large organizations with up to 280,000 employees and recommended appropriate CBT-based training in all areas of Security Awareness.• Developed a creative, engaging, highly customized online seminar to teach and train employees on the dangers of phishing that proved to have improved user behavior based on the observation of users’ phishing campaign metrics after the training.• Grew a large client’s phishing program to include enterprise, new hires, and repeat clicker phishing campaigns along with providing CBT training which improved employee susceptibility and an increase in reporting using the plug-in, resulting in excellent progress which was featured at Cofense All Hands meeting.• Demonstrated strong analytical skills and high attention to detail and accuracy in providing monthly reporting to clients, and while contributing to the phishing program planning strategy at weekly client meetings to improve susceptibility and increase reporting of malicious threats.• Met with phishing team contacts along with executives to review program progress quarterly and make recommendations on how to improve the program.• Promoted Cofense’s security products to assist clients with improving their defense against malicious phishing attacks.

• Executed quarterly phishing campaigns to 300k+ employees to train them on the dangers of phishing.• Duplicated phishing scenarios that mirrored malicious attacks on the bank and sent those out to employees by coordinating with the Security Operations Center.• Tracked employees who clicked in malicious and test phishing campaigns and provided additional education via interactive, engaging, highly personalized phishing webinars. • Implemented an Accountability Model for employees who clicked in multiple tests and malicious campaigns.• Created security awareness materials and facilitated the content at monthly webinars, in-person events, and special engagements, and provided monthly reports to executive leadership on phishing metrics.• Improved susceptibility noticeably within a 5-year period by collaborating with over two dozen executives and company stakeholders – from 12.5% in 2016 to less than 6% in May 2021 – due to the success of the implemented efforts.• Contributed directly to the increase in plug-in reporting at the bank improved from 20% in 2016 to greater than 50% in May of 2021 based on the above efforts.

• Established a phishing program from the ground up, which included implementing the Reporter Plug-in along with developing company-wide communications introducing the program.• Developed creative phishing email content to phish targeted groups and the company population.• Sent simulated phishing emails to employees’ email inboxes for training and education to mitigate risk and improve behavior. • Analyzed metrics from phishing campaign results, identified risky behavior, and provided recommendations to leadership on how to mitigate the risk of those who clicked in the test campaign.• Provided training and education to employees requiring additional training by customizing materials around the dangers of phishing.• Evaluated and implemented the PhishMe Reporter Plug-in during a 6-month pilot, which included working with implementation teams and the phishing vendor to resolve issues with the installation.• Installed Windows patches for out-of-compliance assets and provided remote access support to end users.