Frenos assists enterprise security teams in eliminating critical attack paths by simulating attacks and risk mitigations as part of an organization's continuous threat and exposure management (CTEM) program.FRENOS, which means "brake" or "slow down" in Spanish, was founded by a former Fortune 500 cybersecurity architect with over 20 years of experience in securing critical infrastructure, and an ex-malware developer turned AI/ML leader from Dragos and AWS. Together, they have created the industry's first AI defense simulation platform, powered by a Simulated Adversarial Intelligence Reasoning Agent (SAIRA, pronounced 'sigh-ra').Enterprises can't rely solely on detection and response; security defenses must be continuously evaluated and strengthened to keep up with the constantly changing external threat landscape and internal compensating controls.Frenos was established to help enterprises safeguard their most critical assets, from oil rigs and medical devices to electric substations and financial transaction applications. Simulate the threats of today to protect tomorrow.

First sales rep to achieve over $1M in ARR in a single year

Overseeing all OT/ICS sales opportunities across the Americas (Canada, US, LATAM) for Forescout Technologies while setting OT/ICS vision and product direction in pursuit of Forescout's goal to protect the Enterprise of Things for our clients.

President's club 2019-2021; quotas ranging from $3-6.5M2019 - Strategic Account Rep of the year

First sales position for SecurityMatters in the United States.Individual sales contributor with quotas between $1-$2M per yearExceed goals by 200%+ every yearSecurityMatters was acquired by Forescout Technologies in November of 2018.

- Speaker at various utility industry conferences on ICS/SCADA cybersecurity topics(EnergySec Summit 2015, Distributech 2016, EPRI 2016) - Acting San Diego Gas & Electric Adviser for EPRI 183 cyber security program- Manage a team (8-10) of Information Security engineers assigned to over 150+ projects and assessments- 2013 Securing Our eCity (San Diego Cybersecurity Non-Profit) Critical Infrastructure Private Sector Award winner

Currently overseeing 60+ Electric Transmission and Distribution and Smart Grid projects focused on ensuring cybersecurity controls are baked into their deployments of various systems, applications, networks, and embedded devices. My responsibilities include overseeing deployments in SDG&E's industrial control systems (SCADA), NERC CIP environments, substation WAN/LAN environments, and Corporate environments. Information Security Principal duties/responsibilities include:• Develop strategic plans for integrating information security into business unit work environments (standards, processes, procedures, etc.)• Develop mitigation strategies to address business line security threats and risks. • Drive the resolution of business line scale security concerns by providing work direction to Security Engineers assigned to specific technology and process efforts. • Represent the developing security posture of work streams and their products to business unit management teams in the form of reports, metrics, meeting contributions and written reports. • Participate in government, industry, and user community groups to drive information security public policy and industry good practices.• Serve as a point of escalation for security related projects or business unit security risks and issues.• Assist business unit application and data owners in profiling their systems to identify relevant security control objectives and so appropriate levels of security controls are applied to protect the Company’s information and systems.• Act as a governance body for the business line’s security project phase artifacts (on a project basis)• Act as an Information Security Subject Matter Expert (SME) for the business line employees and vendors

Currently the lead Information Security Engineer on a number of SDG&E Smart Grid initiatives.

- Responsible for NERC CIP compliance and corporate security employee development programs- Lead teams to establish the following: risk assessment methodology, site classification methodology, regulatory driven policy, standards, and control framework

- Acted as lead Cybersecurity engineer on major corporate initiatives (including MRTU, EMS, CCO, MFT, Opentext, Lotus Connections, PKI, OMS, GIS, CMS, CMP, and many more) - Reviewed and assisted in drafting SCE's new cybersecurity standards- Led team of IT subject matter experts in evaluation of static/source code analyzer products - Completed security consultations/reviews (identifying security risks and recommending mitigating security controls) on a wide array of applications for all business units within the corporation- Provided recommendations (technical, physical, and administrative controls) for clients on wide array of security/compliance questions, concerns, and/or comments- Conducted web application, network level, and database vulnerability and penetration testing for major corporate initiatives to ensure compliance with internal and external (SOX, NERC CIP, HIPPA, ISO, NIST 800-53) regulations and standards- Led integration efforts of Information Security’s security consultation/review process into the Southern California Edison’s Software Development Lifecycle- Worked closely with SCE’s internal audit department in development of audit findings for major corporate initiatives- Lead the Information Security General Rate Case team in developing the capital and operations/maintenance budgets and testimony for 2009-2011- Acted as lead for Information Security’s corporate security awareness program which successfully trained 96% of all Information Technology employees in 2006- Reformulated Information Security’s risk scoring/ranking methodology to align with industry best practices- Acted as metric lead for the Information Security team which included reporting all corporate metrics/statistics, achieve goals, and key performance indicators to executive management.