Information Security professional with multi-domain expertise, key tasks and accomplishments:• Network Security lead for regional Cyber Defense Center ramp up. Led network discovery and placement for 25+ Intrusion Detection monitoring points, including coverage for >60,000 users and >80,000 endpoints.• Key participant in SIEM technical evaluation and selection for Global Cyber Defense Center, goal of providing coverage for >350,000 users and >500,000 endpoints.• Implemented and operated automated vulnerability detection process for >22,000 endpoints, drove 97% decrease in software and configuration related vulnerability surface area.• Implemented and operated Intrusion Detection and Network Security Monitoring solution, covering >17,000 users and >22,000 endpoints.• Information Security technical lead for several major acquisitions and carve outs, responsible for vulnerability assessment and infrastructure evaluation for acquired assets and secure transition of divested assets and data.• Technical consulting for secure network topology and application deployment, evaluating complex network and infrastructure designs and externally-facing applications across geographically distributed internet access points.• Forensic analysis to support Incident Response as well as Legal and Human Resources matters, providing key data to support litigation and investigations.Experience with Microsoft PC and Server operating systems, UNIX/Linux, various SQL platforms, OSS IDS (Snort, Suricata), next-gen network security monitoring (full pcap, metadata analysis), intelligence-drive security defense concepts, SIEM (ArcSight, QRadar, enVision), file system and memory forensics, TCP/IP & networking concepts, Cisco firewalls, secure web application design concepts, various scripting languages.-

• Linux and Windows systems administration.• Architect and implement web proxy solution for >15,000 users.• Operate SMTP relays and DNS services.• Operate perimeter firewalls.