Bart Bailey, Cissp Email & Phone Number

Atlanta, Ga, Us

Atlanta Metropolitan Area

As the Owner and Chief Consultant at Thaumacraft LLC, my role involves consulting on cybersecurity engagements, where I focus on evaluating the needs of small businesses and implementing state-of-the-art cloud-native security solutions for clients in the dynamic landscape of cybersecurity.• Evaluate the state of security controls for clients, pinpointing gaps, identifying opportunities, and anticipating evolving needs.• Actively contribute to the development of comprehensive cybersecurity plans and design implementations.• Guide building robust security postures tailored to the unique requirements of each client.• Create deliverables and present the results of cybersecurity assessments to a diverse range of clients.• Design customized plans to address specific cyber risks and vulnerabilities based on assessment outcomes.• Collaborate with clients in the development and implementation of cloud-native assessment tools, services, and best practices.

Led a global team of 15 responsible for Vulnerability Management for a 26K headcount global media firm in a hybrid, multi-cloud (AWS, GCP, Azure) environment. These areas included Security Risk Assessments, Vulnerability Management Scanning, managing Penetration Testing engagements, Coordinating Vulnerability Management remediation, and supporting the maintenance and implementation of the Brinqa platform that helped stakeholders track vulnerabilities. Reported directly to the Senior Director of Vulnerability Management. Helped prepare Board reporting periodically.• Led deployment and operationalization of Brinqa implementation. Implementation pulled data out of corporate asset database to establish ownership of vulnerabilities, aggregated vulnerabilities detected by multiple tools and methods to a single plane of glass, provided all reporting and trending needs as well as emailing notifications of newly detected vulnerabilities to asset owners.• Led consolidation of Vulnerability Management platforms and processes from four legacy brands into one cohesive program. This included moving four legacy businesses to the Tenable vulnerability scanning product.• Led project to integrate secrets management into reporting platform.• Built program to implement Cloud Security Posture Management and host-level vulnerability scanning and management in the company’s public cloud environments. • Led implementation of container Vulnerability Management. • Manage detection of vulnerabilities in PAAS and IAAS implementations. Define vulnerability metrics for public cloud footprint.

Greater Atlanta Area

Lead a team of Operations Analysts focused on detection of cyber security events, management of detection infrastructure, and response to global cyber security incidents. Provide performance feedback and counseling to ensure development of team members. Develop and implement a strategy for monitoring critical infrastructure including systems and networks. Provide continuous security monitoring metrics on a regular basis to leadership, allowing for clear indications of the performance and health of the program. Lead IT Security Incident Response Team (ITSIRT), responding to cyber security incidents expediently and ensuring minimal duration of impact. Manage Security Incident and Event Monitor (SIEM) tool. Lead activities focused on increased visibility and detection efficacy. Manage Abuse Desk functions. Manage relationships with vendors of security toolsAchievements:• Lead team that designed and implemented SIEM expansion• Lead implementation of DKIM signed mail and DMARC reporting• Lead shellshock response team from vetting process through full mitigation• Built out security operations center, staffed it, designed processes around it• Lead vulnerability assessment program

Greater Atlanta Area

Developed security standards and best practices. Recommended security enhancements to management. Helped coordinate and drive remediation of identified risks and control deficiencies. Served as subject matter expert across multiple security domain areas, raising awareness of security risks to the organization. Ensured adherence to compliance regulations and policies. Designed customer safety enhancements. Provided Abuse Engineer responsibilities.Achievements:• Trained analyst team to perform vulnerability assessment program• Designed and lead implementation of a system to block malicious authentication attempts• Lead the project to move the email and portal systems to A10 service load balancers• Lead response to DNS amplification DDoS from initial response through bringing in the Answer X vendor as final solution

Greater Atlanta Area

Conducted scans of network, systems and applications to detect and validate vulnerabilities. Implemented, tuned and expanded the use of SIEM technologies to monitor networks and systems for security breaches or intrusions. Installed software to aid intrusion notification and watch for irregular system behavior. Detected and validated security issues. Lead activities to mitigate and minimize impact. Provided written executive summaries on issues. Interfaced with legal teams. Provided Abuse Engineer responsibilities.Achievements:• Implemented vulnerability assessment program• Normalized relationships with email service providers and created a feedback loop policy for email service providers• Implemented web application scanning program• Implemented SEIM to ticketing system functionality for critical events

Greater Atlanta Area

Analyzed potential abuse and fraud cases and trends. Advocated changes to product and engineering groups. Monitored automated mail blocking systems and intervened with manual blocks as needed. Worked with recidivist customers to prevent further violations. Monitored mail deliverability issues and maintained high deliverability percentages. Designed and completed quality assurance on automated anti-abuse systems.Achievements:• On shored abuse desk function to improve customer satisfaction and reduce expenses by eliminating headcount

Greater Atlanta Area

Monitored the performance and capacity of computer systems using a variety of tools. Identified, triaged and troubleshot detected issues as needed. Acted as escalation point for overseas NOC technicians and system administrators on a 24/7 on call basis. Coordinated incident response with third-party vendors, customer contacts, and other IT teams. Tracked and documented all issues and resolutions in detail. Completed post incident analysis. Provided hot hands work for onsite systems and walked field technicians through remote hot hands work. Provided executive and companywide written notifications on critical issues.Achievements:• Outsourced NOC functions to India, including training and travel there.• Built out support processes for new VOIP product.