Brandon Hess Email & Phone Number

Chicago, Il, Us

Chicago, Illinois, United States

▪ Core Infrastructure Design: Provide technical leadership on core and perimeter network redesigns, with special attention to L2 redundancy (Cisco Nexus vPC), L3 redundancy, routing policies (BGP & OSFP), and cloud connectivity.▪ Security Architecture Planning: Guide corporate information security strategy and serve as a key decision-maker for evaluation, selection, and implementation of security controls related to cloud, endpoints, servers, and networks. ▪ Cloud Security Design: Automate implementation of technical guardrails for cloud-based workloads based on industry best practices, including centralized cloud account posture management and conditional access to resources.▪ Threat Modeling: Serve as a subject-matter expert in threat modeling exercises, identifying potential risks related to regulatory compliance, insecure permissions, or cloud service misconfigurations.▪ Security Event Automation: Reduce technical debt using Python to automatically detect and mitigate potentially adverse environment changes. ▪ Business Partnership: Partner with business stakeholders to mature software development, risk management, and incident response practices for cross-functional teams.

Chicago, Illinois

▪ Security Infrastructure Design: Design and implement security systems for inspection, correlation, and enforcement between multi-cloud environments and on-premises datacenters. Directly responsible for technical components of new enterprise SIEM, NAC, MFA, and NGFW deployments in a multi-cloud environment.▪ Endpoint Security: Revamp and maintain security controls for a large roaming workforce, to include Endpoint Detection & Response (EDR), DNS security, remote access VPN, multi-factor authentication, and public key infrastructure.▪ Network Access Control: Design and implement authentication and authorization control mechanisms as part of a new Cisco ISE deployment, and then lead the transition to strong authentication mechanisms like EAP-TLS. ▪ Regulatory Compliance: Provide subject matter expertise for controls surrounding ISO 27001, Sarbanes-Oxley, HIPAA, ITAR, NIST, & FedRAMP compliance, especially as related to AWS GovCloud infrastructure. ▪ Root Cause Analysis: Work with internal teams and client resources to troubleshoot and identify complex network and/or hardware failures, reviewing packet captures and logs as required.

▪ Forensic Incident Response: Evaluate and respond to incoming threats based on level of severity, conducting full-scale assessments of targeted machines where needed to resolve incidents and eliminate unauthorized persistence mechanisms.▪ Network Access Control: Develop and implement Dynamic Access Control Lists through device profiling, and integrate Active Directory certificate-based authentication for local and remote personnel.▪ Data Loss Prevention: Provide informed subject matter expertise, expansion, and enforcement of network and host-based data loss prevention measures to minimize insider threats, conducting internal investigations where necessary.▪ Vulnerability Management: Design vulnerability scans to validate that internal systems have been updated, and effectively communicate remediation instructions to cross-functional desktop and server teams.▪ Process Automation & Documentation: Support the development of network policies, process documentation, response manuals, and automated Python scripts that significantly streamline triage, investigation, and response procedures. Additionally, support a SIEM with automated correlation logic to identify potential security events.