Sr. Security Engineer at SecureSky, Inc, a cloud security services company focused on securing client cloud environments against current and emerging threats.

As a Security Consultant, my job function is to perform Enterprise Security Assessments that may include but not limited to:• External Penetration Assessments• Internal Penetration Assessments• Application Penetration Assessments• Application Vulnerability Assessments• Mobile Application Security Assessments• Wireless Security Assessments• Device Configuration Reviews• Security Architecture Reviews

Worked with Leadership in developing and executing strategic planning• Work queue management, long-term cross-training plan for widely used vendor platforms (approximately 7000 managed devices), ticket\event analysis and process improvement• Designed and deployed Internal Managed Network Security Lab with multiple platforms, supporting network for both Offensive and Defensive Security to aid in securing networks.• Worked with other internal teams in improving coordination ain supporting our clientsPerformed project management• Lead efforts to support large scale client firewall conversions, assigned internal resources and coordinated with third party vendorsParticipated in planning for team growth• Worked for the deployment of a new hire process to streamline training for Managed Devices engineers• Assisted with tier segregation of duties, training and escalation procedures• Deployed and managed a transition plan to support cross-functional department training for added levels of client supportTeam Lead duties includes• Functioning as Team Mentor and Subject Matter Expert for many projects involving Palo Alto, Checkpoint, Juniper, IBM Site protector platforms and others.• Consulted on large scale network migrations• Overseeing clients’ change management practices and execution

• Lead a group of Engineers in mentoring and training• Lead efforts to support large scale client firewall conversions, assigned internal resources and coordinated with third party vendors• Lead Network Engineer for the companies multiple accounts.• Consult on large scale network migrations and transition.• Configured, implemented and supported Multiple Network Security Devices Platforms such asCheckpoint, Palo Alto, Cisco ASA, Cisco IPS, Juniper Netscreen, Juniper IDP, Juniper SSL VPN, IBM Site Protector, IBM Proventia Sensors, McAfee Intrushield other Network Security platforms for a wide variety of clients and networks.• Adhered to change management procedures for all in scope managed devices• Monitored and analyzed security appliance logs for alerts and patterns to provide troubleshooting assistance, investigate network latency issues and potential malicious activity.• Improved client’s security posture within their distributed Check Point infrastructures• Executed both automated and manual firewall reviews• Performed in depth research on deployments and analyzed firewall change requests for security and compliance• Coordinated and planned fiscal year road maps with clients to ensure maximum effectiveness of deployment strategy and security architecture• Provided Tier III support as an escalation point to other engineers on the team

• Configured, deployed, implemented and supported Multiple Network Security Devices Platforms such asCheckpoint, Palo Alto, Cisco ASA, Cisco IPS, Juniper Netscreen, Juniper IDP, Juniper SSL VPN, IBM Site Protector, IBM Proventia Sensors, McAfee Intrushield• Adhered to change management procedures for all in scope managed devices• Monitored and analyzed security appliance logs for alerts and patterns to provide troubleshooting assistance, investigate network latency issues and potential malicious activity.• Improved client’s security posture within their distributed Check Point infrastructures• Executed both automated and manual firewall reviews• Performed in depth research on deployments and analyzed firewall change requests for security and compliance• Coordinated and planned fiscal year road maps with clients to ensure maximum effectiveness of deployment strategy and security architecture• Provided Tier III support as an escalation point to other engineers on the team

• Part of a service delivery team for clients subscribed to security monitoring services• Assist clients in reporting and compliance needs• Serve as escalation point for Security Operations Center• Assist clients in any incident response manners as needed. This includes, but is not limited to, exploits, fraud, denial-of-service, and phishing attacks.• Lead a team of Information Security Engineers and act as escalation point. Provide guidance, reviews, and help delegate responsibilities.• Develop business requirements to improve ActiveGuard®, Solutionary's proprietary log-analysis platform.

• Manage teams of Information Security Analysts (ISA). Among other responsibilities the main responsibility included but not limited to conducting performance review for ISA’s, Monthly one on one review, setting up ISA yearly goals help ISA with career path, and help delegate responsibilities• Manage teams of Information Security Analysts (ISA), with the primary responsibility including scheduling, and planning Information Security Analyst’s activities.• Act as escalation point for Information Security Analysts. This includes, but is not limited to, technical questions, interoperability issues, and passing information between shifts.• Manage communication between clients and the Security Operations Center via e-mail, phone call, or proprietary ticketing system.• Manage vulnerability assessment data and provide reporting based on client requests.

• Lead a team of Information Security Analysts. Provide guidance, reviews, and help delegate responsibilities. • Act as escalation point for Information Security Analysts. This includes, but is not limited to, technical questions, interoperability issues, and passing information between shifts.• Analyze log events from over 100 different device types and alert clients to any anomalous activity based on predefined escalation procedures. This includes, but is not limited to, Firewalls, Next-Generation Firewalls, Intrusion Detection/Prevention Systems, Operating Systems, Databases, Web Application Firewalls, Switches, Routers, VPN Concentrators, Applications, Mainframes, and Endpoint Protection Systems.• Manage communication between clients and the Security Operations Center via e-mail, phone call, or proprietary ticketing system.• Manage vulnerability assessment data and provide reporting based on client requests.

• Analyze log events from over 100 different device types and alert clients to any anomalous activity based on predefined escalation procedures. This includes, but is not limited to, Firewalls, Next-Generation Firewalls, Intrusion Detection/Prevention Systems, Operating Systems, Databases, Web Application Firewalls, Switches, Routers, VPN Concentrators, Applications, Mainframes, and Endpoint Protection Systems.• Manage communication between clients and the Security Operations Center via e-mail, phone call, or proprietary ticketing system.• Manage vulnerability assessment data and provide reporting based on client requests.