Brett L. Email & Phone Number

Warrendale, Pennsylvania, United States

Pittsburgh, Pennsylvania, United States

Perform internal system risk assessments using the NIST 800-53 Cybersecurity Framework. Reviewing ~100 controls for each system. Complete 5 assessments annually.Conduct risk assessments for third-party cloud systems (SaaS, PaaS, IaaS), evaluating security controls like Single Sign-On, multi-factor authentication, and IP address restriction. Review SOC 2 Type II, ISO 27001, and penetration test reports for vendor security. Complete 20 assessments annually.Create, review, and update System Security Plans, Risk Assessment Reports, and Plan of Action and Milestones (POA&Ms) following NIST 800-53 guidelines. Provide recommendations for implementing controls to secure both on-premises systems and cloud systems.Draft authorization documentation for senior management, outlining risks, recommended mitigations, and system capabilities that enhance environment security. Achieve 15 completions annually.Convey vulnerability mitigation strategies to System Owners, describing the identification of security vulnerabilities through examples of potential concerns, guidance on addressing these issues, and instructions on maintaining updates.Conduct IT security assessments to ensure new software and cloud applications adhere to the corporate cybersecurity process. Collaborate with vendors and internal technology teams to address potential shortcomings, ensuring thorough documentation is maintained.Manage deployment and administration of multiple DevOps systems within a Software Development Lifecycle (SDLC) for over 500 developers, emphasizing cybersecurity with DAST, SAST, and SCA scan tool implementations. Administer 25 production servers, conducting regular off-hours updates and troubleshooting daily issues with developers.Design training courses for secure coding, providing internal certifications within the SDLC process. Conduct courses upon access requests to the environment and actively based on code scan results.

Pittsburgh, Pennsylvania, United States

Pittsburgh, Pennsylvania, United States

Pittsburgh, Pennsylvania, United States

Managed IT access for thousands of employees covering onboarding and offboarding, local admin access, Active Directory, and VPN.Administer for Oracle’s E-Business Suite to maintain employee’s records and requests for any approvals.Developed and published documentation for multiple administration processes, encompassing Active Directory file/folder access, onboarding/offboarding procedures, E-Business Suite access, VPN setup, and internal systems processes.Led a project to validate contractors throughout the company to disable or maintain their IT access. Had supervisors of 1300 contractors go into an internal environment to verify their reports needing access disabled or maintained.Authored PowerShell scripts to identify security settings in Active Directory, primarily focusing on verifying vulnerable service accounts. Responsible for updating or disabling passwords for vulnerable accounts that were no longer needed.