Matthew Feldman - Cissp, Cism, Cisa Email & Phone Number

Denver Metropolitan Area

Cellebrite’s (Nasdaq: CLBT) mission is to enable its customers to protect and save lives, accelerate justice, and preserve privacy in communities around the world.Cellebrite is a global leader in Digital Intelligence solutions for the public and private sectors, empowering organizations to master the complexities of legally sanctioned digital investigations by streamlining intelligence processes.Trusted by thousands of leading agencies and companies globally, Cellebrite’s Digital Intelligence platform and solutions transform how customers collect, review, analyze, and manage investigative digital data in legally sanctioned investigations.• Serve as the primary point of contact for all FedRAMP-related matters for Cellebrite Security. • Work closely with the Cellebrite Security InfoSec, Product, Development and CloudOps group, in addition to external vendors and 3PAOs to ensure compliance with FedRAMP requirements. • Oversee the development and maintenance of all necessary documentation related to Cellebrite Security's FedRAMP certification, with the assistance of external vendors. • Provide regular status updates on the FedRAMP certification process to relevant stakeholders. • Assist with the development and implementation of security controls to ensure compliance with FedRAMP requirements. • Facilitate the successful completion of FedRAMP audits and assessments. • Ensure that Cellebrite Security maintains its FedRAMP certification by meeting all ongoing compliance requirements.

Denver, Colorado, United States

FedRAMP/NIST assessment engagements with regards to the security and compliance of client platforms against regulatory, industry requirements and standards, and against security best practice frameworks. Provides quality control and peer review to other team members of the delivery staff. Works closely with Project Managers and other delivery team members to effectively manage project timelines and deliverables. Coalfire FedRAMP CAB member

Westminster, Colorado, United States

Lead FedRAMP and CMMC engagements advising the security and compliance of client firms against regulatory and industry requirements and standards, and against security best practice frameworksProvide quality control and peer review to other members of the delivery staff. Work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverablesLeads FedRAMP and CMMC advisory engagements including audit plan preparation, review and develop of documentation and policies, and client interviewsStrong understanding of framework requirements for performing advisory and developing reports for clientsPrepare clients for FedRAMP complianceExecute, examine, interview, and create System Security Plan (SSP) in accordance with NIST SP800-53A Revision 4Validate respective information system security plans to ensure NIST control requirements are met Author recommendations associated with your findings on how to improve the customer’s security posture in accordance with NIST controlsExecute, examine, interview, and test procedures in accordance with NIST SP 800-171 Rev. 2

Westminster, Colorado, United States

Develop technical content, such as procedures, policies, and white papers, that can be used both internally and by our clients to assist them in elevating/build out their security programs.Create training programs to ensure that Coalfire’s approach to FedRAMP and NIST-based assessments is delivered in a format to drive efficiency and consistency across the team.Curate training materials from various sources to provide teams technical training options related to cloud technologies and other common technologies required to perform assessments. This may also include identifying opportunities to setup and manage “lab” environments for training on various technologies.Delivery engagements including on-site projects working with clients to perform FedRAMP and other NIST-based assessments.Drive adaptation and adoption of processes across our FedRAMP program when change is introduced to guidelines and requirements by the governing bodies.

Greater Denver Area

• Lead FedRAMP and CMMC engagements assessing the security and compliance of client firms against regulatory and industry requirements and standards, and against security best practice frameworks. Provide quality control and peer review to other members of the delivery staff. Work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverable's.• Leads FedRAMP and CMMC audits/assessments including audit plan preparation, review of documentation and evidence, evaluation of procedures, and client interviews.• Strong understanding of framework requirements for performing audit/assessments and developing reports for clients.• Prepare and review FedRAMP Security Assessment Reports (SAR).• Ensure quality products and services are delivered on time.• Execute, examine, interview, and test procedures in accordance with NIST SP 800-53A Revision 4• Validate respective information system security plans to ensure NIST control requirements are met• Author recommendations associated with your findings on how to improve the customer’s security posture in accordance with NIST controls• Execute, examine, interview, and test procedures in accordance with NIST SP 800-171 Rev. 2Awards:Spot Bonus - April 2020FAS Pro of the Month (Assessment) - May 2020

Denver

Scheduling all classes for Denver CampusHiring Adjuncts and full time instructorsBudget SpendsInterviewing and help place new studentsHelping with our events - outreach Teaching:Prep classes (Networking, Systems and Python)Logs and DetectionWindows Security, AD, best practicesNetworkingSecurity Culture - (Risk Management, Social Eng., Asset Management..etc)Security IT AuditingHacking 101 - (PowerShell, Asset Management, SQL injections...etc)Help build materials and labs:Log and Detection (Log Rhythm, ElkStack, Splunk)Windows (PowerShell, AD, ADFS, ADCS, Windows DNS..etc)Hacking 101Hunting - Indicators of Compromise (IoC) Incident ResponseRoot Cause Analysis

Denver

Teaching:Prep classes (Networking, Systems and Python)Log and DetectionWindowsNetworkingSecurity Culture - (Risk Management, Social Eng., Asset Management..etc)Hacking 101 - (PowerShell, Asset Management, SQL injections...etc)Help build materials and labs:Log and Detection (Log Rhythm, ElkStack, Splunk)Windows (PowerShell, AD, ADFS, ADCS, Windows DNS..etc)Hacking 101Hunting - Indicators of Compromise (IoC) Incident ResponseRoot Cause Analysis

Golden, Co

Manage Windows AdministratorsTeam DevolvementStrategic planningResearch and implementation of new technologiesSOX/PCI implementation and audit complianceServe on IT Security Council Project managementChange managementCitrix app deploymentOffice 365 implementationProofPoint email managementBackup solutions - Veeam/AppAssurePurchasing software/HardwareLicense Management - KaceAsset Management - KaceVMWareDisaster RecoveryContracts

Aspen, Co

24x7 support for all Swift Communications remote and on siteAccount creation and modificationApple Remote DesktopApple server support Cisco UnityCreating and updating documentationCitrix Virtual server supportCustomer serviceDameware Mini Remote SupportEntourage Email suiteFTP supportInstallation of operating systems, applications, and configurationKayako helpdesk ticketing systemMicrosoft Exchange Server 2003 and 2007Microsoft Remote DesktopNorton Ghost Network and standalone printer installation/troubleshootingPolicy creationPurchasing equipmentRemote Desktop Connection ManagerSupporting new/existing software applicationsSoftware license management Support for technology systems from budgeting through recycling in a Windows/Mac/Cisco environmentincluding servers, WAN/LAN, VPN, Phone Systems, and Mobile DevicesSymantec Anti-virus Endpoint Protection Server

I help set up the Black Hat conferences in 2007 and 2008. I would run CAT 5 cable and set up networks for trainings and briefings.

Account creation and modificationCreating and updating documentationCustomer serviceEMC Retrospect Professional 6.0 and 7.0 configuration and maintenanceFTP supportGFI LANguard Network Security ScannerInstallation of operating systems, applications, and configurationManaging of helpdesk staffManaging helpdesk ticketing systemMcAfee ePolicy Orchestrator - Anti-Virus SoftwareMicrosoft Remote DesktopNorton GhostNetwork/ standalone printer installation/troubleshootingPresenting at training seminarsPublic speakingPurchasing all equipmentSupporting all new/existing software applicationsSupporting approximately 300 computersSoftware license managementWiki DevelopmentMaintain SLA Reporting on Help Desk metrics

Computer RepairCreating/ Updating DocumentationCustomer ServiceInstallation of Network Cable in New/Existing ConstructionNetwork Device Installation/ConfigurationNetwork TroubleshootingNew Computer builds

Gainesville, Florida

Creating and modifying customer accountsResponding to advanced customer service problemsDaily server back-upCorel Word Perfect installation 7, 9, 10Corel Word Perfect documentation writing Creating and updating documentationDevelopment of training manualFTP SupportHTML writing and editsInstallation of operating systems, applications, and configurationInternet usage reportingMcAfee Virus software suiteMonthly computer maintenanceNorton Ghost Network and standalone printer installation and troubleshootingNovell Group creation and modification Novell Server and client installation and configurationPhone and email Support for all Gleim softwarePhone and voice mail creation and modificationPurchasing equipmentSpam Assassin configuration and modificationSoftware management Training staff membersTroubleshooting in-house computer problems on all Windows operating systems

Advanced Customer Service ProblemsAdvanced TCP/IP Trouble ShootingDevelopment of Training ManuelDevelopment of Flow Chart ProcessesDevelopment of Web Support DepartmentDreamweaver SupportPart Time Network Installer: Cisco 2500 Series, Colo Servers, DSL, DSX Panels for T3’s, Frame Relay, Firewalls, ISDN, Phone Punch Down BlocksFTP SupportScheduling TechniciansTraining Staff MembersTrouble Shooting Macintosh OS 7.5.1 – OS XTrouble Shooting Cisco Routers, Dial-up, DSL, ISDNTrouble Shooting Eudora Light 3.0, Eudora Pro 5.0, Eudora 5.1Trouble Shooting Microsoft Outlook 98,00Trouble Shooting Microsoft Outlook ExpressTrouble Shooting Microsoft FrontPage 98,00,02 SupportTrouble Shooting Microsoft Windows 3.1, 95, NT, 98, 00, XPPurchase all network/ office equipmentStratacs phone system support/ integration