Bruce Gonzalez Email & Phone Number

Panama City, Fl, Us

Manchester, Nh, Us

Teaching cybersecurity online as an Adjunct to students around the world.

Falls Church, Virginia, Us

Falls Church, Virginia, Us

• Mentored Senior Managers and front line Managers for two interdependent teams to provide a full robust security capability to include full security stack with 24/7 monitoring SOC capability to include analysts and engineers. • Led initiative for MITRE gap assessment around logging and detection standardization closing gaps reflecting a 20% plus increase in coverage of the 185 primary techniques in MITRE. • Provided executive level reporting on evaluation of vendor options and managed technology stack migration from Tenable to Qualys generating customer buy-in for value proposition. Performed CBAs (Cost Benefit Analysis) and socialized value proposition associated with technology stack modifications. • Leveraged relationships with sales personnel, solutions architects, and business elements by influencing cross functional teams to improve collaboration to secure positions for multiple contract bids and awards. • Development of SOC quality assurance and quality control (QA & QC) process and deployment. • Facilitated after hours training, workshops, demos, and presentations with industry professionals for team development opportunities providing one on one mentoring and higher level advanced team training. • Generated slide decks, executive level presentations, business proposals, BOEs (Basis of Estimates), responded to RFPs (Request for Proposal), responded to RFIs (Request for Information), aided in document generation for ISO auditing, and engaged with capture and business development efforts to secure new contracts increasing baseline. • Responsible for more than $5,000,000 in annual growth and revenue for multiple Rated Services (Managed Services) and Direct Labor elements. • Crafted OLAs (Operational Level Agreements) and SLAs (Service Level Agreements) re-negotiating business requirements and implemented program to identify top 15 KPIs and KPPs with supporting dashboards/visualizations.

Falls Church, Virginia, Us

The following is a copy of the public job posting as provided by GDIT:The Cyber Risk Manager has responsibility for running the Security Operations Center (SOC) and leads a team of professionals responsible for the execution, development, and operation of cyber engineering and monitoring services. The individual will provide oversight for activities required to deliver secure solutions that support our customers such as: • Increase maturity of key Security Operations Center capabilities across governance, people, processes and technology to help achieve integrated cyber defense, proactively monitor, detect, investigate, and respond to known and unknown attacks • Provide effective approaches to Security Operations Center development and operations, and collaborate with our client stakeholders on implementation roadmaps and execution • Work with our clients to identify, architect, and deploy security analytics and alerting solutions • Clearly articulating the role of Cyber Threat Intelligence in the cyber defense strategy, and integrate intelligence across defense disciplines such as risk, security architecture, monitoring / detection, vulnerability management, and application security. • Lead the development of actionable use cases to detect, triage, investigate and remediate based on latest threat actor trends, including actual technical implementation of parsing log sources creating, validating and testing alerting queries to reduce false positives. • Infuse leading practices to increase centralized visibility to identify suspicious activity and reduce the mean time to detect and respond to cyber threats.

Goose Creek, Sc, Us

The following is an edited copy of the public job posting from NexGen Data Systems:• Served as Functional Team Lead for Armis deployment effort on behalf of ESA-BAD C2C (Comply to Connect) Engineering Team under the DHA (Defense Health Agency). This includes deployment of collectors utilizing vSphere (CIMC and ESXi), configuring network communication via 4500 and/or 9300 devices, adjusting Palo Alto FireWall Rules, and configuring Linux containers utilizing basic Docker commands. • Provided documentation to include development of Wiki, SOP (Standard Operating Procedures), and applicable reporting including presentations to leadership elements on the status of the deployment and any obstacles or adversity encountered. • System Administration responsibilities of the Armis Engineer SME include the deployment, implementation, upgrade and support of the DHA Armis security solution. Examples of responsibilities include, but are not limited to the following Performing maintenance and sustainment of all DHA Armis components to ensure performance, stability and availability conforming to established service level agreements (SLAs). Providing administration and technical support for Armis servers, containers, or other such infrastructure hosted within the AWS GovCloud. Providing administration and technical support of physical and/or virtual Armis systems hosted throughout the DHA MedCOI to include site-local Collectors appliances distributed across the globe. • Configuring Cisco ISE to functionally execute tasks in conjunction with Armis to include deployment of pxGrid integration for the purpose of defining attributes utilized in (NAC) Network Access Control. • Active communication with NE&S (Network Engineers and Specialists) in various MTF (Military Treatment Facilities) across the world to coordinate switch code upgrades, deployments, UCS Chasis hardware receipt, and switch configurations with the aid of eNMS for automating elements of the deployment.

Reston, Virginia, Us

The following is an edited copy of the job description posted by CACI International, Inc.: The Senior Application Security (APPSEC) Engineer serves as part of an Information Security team, specializing in Application Security for a large US Government owned system written in Java.About the Role:o Reviewing static Java code for security vulnerabilities using approved tools, such as Micro Focus Fortify.o Performing dynamic analysis of the same large application using tools like Burp Suite Pro.o Automating repetitive security procedures by maintaining and improving proprietary software tools built predominantly in Python and Bash.o Entering findings and vulnerabilities into the IBM Rational Tool Suite for analysis, severity, triage, and remediation.o Composing security documentation identifying risks and severity of findings for system owners.o Proactive collaboration and communication both internally within the CACI Information Assurance team and externally with the development teams.o Utilizing Nmap, Nikto, Wireshark, Burp Suite, and Scout Suite for network and asset enumeration. o Validated vulnerability findings utilizing tools like Burp Suite and provided reports containing information on the vulnerability, associated risk, priority, validation techniques, and mitigation processes.

Served as a SOC (Security Operations Center) Manager for a 24/7/365 Global CyberSecurity Team that specializes in the mitigation of Phishing content targeting various enterprisesincluding the proactive protection of 4 of the top 5 financial institutions in North America relative toDRP (Digital Risk Protection).ERP | Employee Retention Program > training and incentive certification program.LMS | Learning Management System > weekly training program for SOC Analyst.SLO | Delivered sub seven hour median shutdown time (risk mitigation) of phishing threats.SME | Serve as Subject Matter Expert for client interactions relative to DRP service lines.KPIs | Reporting via SQL utilizing established Key Performance Indicators.POC | Responsible for all new Proof of Concepts to enable vital sales wins (90%+ win rate).DRP | Provide Digital Risk Protection of international clients: Europe|Asia|North/South America.SOC | Craft responses relative to compliance: SOC2, COBIT, ISACA, ITIL, and ISO/IEC 2700.

- Learn from current SOC Manager how to perform basic day to day administrative tasks of a Manager.- Talent Acquisition (job postings, interview process) and retention strategies. - Payroll and billing processes | Understanding budget constraints. - Analyzing risk, classifying risks, and mitigating identified risk. - Developing current team members, assigning goals/tasks, and removing obstacles to their success. - Locate/extract threats from feeds, analyze and classify threats accordingly - mitigate threats. - In depth phish-kit analysis, de-obfuscation of code, and extracting malicious content such as emails or IP dropsites. - Utilization of Buscador iso and related tools to perform Open Source Intelligence (OSINT). Tools included, but not limited to, DNSTwist, Amass, The Harvester, Email Harvester, TinfoLeak, Photon, and Recon-ng. - Track Advanced Persistent Threats (APTs) with advanced tools such as Domain Tools Iris.- Enumerate attack infrastructures, pivot off of any obtained key information elements, mitigate the infrastructures, and use reporting tools such as Maltego to generate full graphical representations of attacks structures. - Analyze email headers to determine responsible parties and organizations, collect information from DNS including passive DNS pivots, and report to responsible organizations for take down. - Interface with hosting providers, registrars, and registries to inform them of information obtained via threat hunting.

Charleston, Sc, Us

• Trained team members and designed new learning systems resulting in 75% cost reduction for our firm by supplementing 3rd party training service which exceeded $2,000 per employee; “in-office” training and educational tools saved firm thousands of dollars in additional training costs. • Produced over $6 million in revenues after creating new position and performing as first “Project Manager” at Steinberg Law Firm, LLP, assigned to and managed class-action litigation for over 3,000 Workers’ Compensation claims. • Engaged over 4,000 potential clients working with 8 law firms from North Carolina, South Carolina, Georgia, and Florida resulting in successful filing of Workers’ Compensation claims with SCWCC. • Increased compensation benefits on over 120 denied claims by formulating complex persuasive reports based on analysis of current regulations and detailed review of prior earnings. • Selected by my employer as the only employee out of over 30 employees to attend a small team conference of less than 20 persons in SC regarding potential changes with SCWCC regarding new initiative called “ecase;” provided input and communicated new program ideas to 100’s of paralegals statewide.

Charleston, Sc, Us

- Provided instruction on basic business course topics such as finance, accounting, operations management, and human resources. - Developed young entrepreneurs and provided advice on career development relative to course work and undergraduate studies.

Master Of Science (Mscsia), Cyber Security And Information Assurance

Master Of Business Administration (Mba), Concentration In Management

Bachelor Of Arts (Ba), Spanish

Bachelor Of Arts (Ba), Latin American And Caribbean Studies

Associate In Science (As), Information Systems

Associate Of Science (As), Network Systems Management

Associate Of Arts (A.A.), Criminal Justice

Associate Of Arts (A.A.), Legal Assistant/Paralegal