I am interested and driven by technology and security, and learning how to help others understand the benefits, challenges and incredible things that are possible with technology. I have worked as a customer facing Cyber Security and Solutions Engineer for the past 9 years, and have over 20 years of experience work in enterprise IT environments. I have developed a strong focus around organizational compliance and security frameworks, which has allowed me to work across many different client environments.I have a strong curiosity and interest in understanding, uncovering and learning from the issues that many organizations face. I enjoy asking and being asked the difficult questions, as this really helps open up dialogue and puts the human + trust factor back into the process.My background and experience as both a customer and practitioner, supports me when speaking with others, as I can better understand and relate to issues or concerns and address questions with a learning style approach. Being able to walk in the others shoes, brings an interesting change to most conversations, and lets me build a trusted partner relationship for years to come.I highly adaptable and strive to learn and grow, and am always eager to help those around me. My goals are to always: continue learning, support and present information in a way that is clear and helps others, and deliver honesty and integrity to all of my discussions.I am experienced in Security & Compliance, specifically around PCI-DSS, SOX, ISO and NIST frameworks. Employing Security engineering & risk analysis, implementing and assessing risks for both internal/external vulnerabilities, internal network and application penetration testing and analysis, risk analysis and prioritization and gap analysis / remediation plans are critical to the overall success of an organizations security program. While each conversation may not cover each of these topics, I use components from each in order to learn and understand what things can be done to help improve the security posture.I'm active in threat research, security vulnerability analysis and pretty much anything that lets me understand how to architect security to protect against bad actors. At the end of the day, the solutions we are implementing must accomplish a security goal, but need to be scoped and configured in a way that doesn't overly complicate the work that employees need to perform.