Chris Andes, Cissp Email & Phone Number

Seattle, Wa, Us

Lakewood, Co, Us

• Serves as the Director for a nationally recognized 501c3 organization. Accountable for all aspects of the organization, including revenue and spending; staffing and recruiting; training; operations and safety; etc. Overhauled the organization’s reporting and leadership structure which provided more opportunities for individual participation and growth. Developed organizational goals and milestones; assigned KPIs to newly created teams. Implemented a mentorship program to enhance the overall onboarding process as well as increase the proficiency of candidates as-well as mentees.

Seattle, Us

Collaborates directly with the Chief Information Security Officer (CISO) to develop and implement strategic roadmaps and initiatives, resulting in strengthened organizational security and operational effectiveness.Serves as the security representative to the entire organization. Accountable to review and approve all technology projects and designs, ensuring they fall within cybersecurity policies & standards. Provides guidance to business leaders, legal department and compliance teams in regulatory standards and frameworks (NIST CSF, PCI-DSS, CPRA, etc.).Oversees the comprehensive technology lifecycle across all facets of the Cybersecurity Department, encompassing Security Engineering, Operations, Governance, Risk, & Compliance, and Privacy; ensuring effectiveness and maturity of all programs to meet current threats.Mentors individual contributors and people leaders; inspires confidence and drives organization to increased performance levels.

Seattle, Us

Reviewed engineering designs, data flow diagrams, and system topologies. Performed security assessments, attack tree analysis, MITRE ATT&CK framework analysis, and threat modeling. Presented findings to leadership and business partners, offering actionable remediation recommendations, and tracking progress to effectively close security gaps.Led and mentored security engineering staff as acting Lead Engineer, fostering professional development. Established SOPs for Tier 2 SOC operations and defined criteria for Knowledge Books and After-Action reports, which optimized team efficiency. Implemented formal IR process and procedures by taking leadership during a major organizational incident. Following this, publish organization's first Cybersecurity Incident Response Procedures. Led penetration testing and red team operations to assess organizational security, presenting findings and remediation proposals to business leadership for informed decision-making.

Arlington, Va, Us

Developed procedures and implemented technology to enable Information Systems Security Officers to efficiently assess and secure networks based on NIST Risk Management Framework (RMF) and 800-53 controls. Fostered a strong relationship with IT personnel by creating a security centric working group, which dramatically reduced vulnerability remediation times.Developed event monitoring and vulnerability assessment technologies, streamlining assessment and auditing procedures for four WANs. Resulted in reduced errors, shorter remediation timelines, and increased reporting accuracy.

Washington, Dc, Us

Managed the Technical Surveillance Countermeasures (TSCM) team for the West Coast. Instituted roles and responsibilities for technical counterintelligence agents; developed procedures for cyber threat hunting and vulnerability assessments on DoD networks. These efforts allowed the TSCM team to conduct more technical counterintelligence investigations in 2017 than in the previous two years.Conducted network vulnerability assessments on classified and unclassified DoD networks; responsible for detecting numerous events that could lead to data loss, reported results to program managers across the DoD and presented mitigation steps to asset owners.Researched solutions and trained team members on techniques used to analyze network traffic with TSCM specific tools, Kibana, and Elasticsearch. The incorporation of these platforms allowed for the expedient and thorough identification of data loss events and malware activity.Identified a technology and procedures gap which, if exploited, could lead to an insider threat attack against DoD networks; developed a solution based on open-source hardware and software that mitigated this threat. The solution is currently being adopted by all TSCM teams across the USMC.

Irvine, Ca, Us

Selected to participate in the three-month DoD Corporate Fellowship Program through the U.S. Chamber of Commerce at Ingram Micro.Assisted with installation and implementation of Splunk into the company’s global network. This product allows security personnel to efficiently audit and secure Payment Card Industry (PCI) systems. Identified weaknesses and threats associated with the wireless infrastructure employed at the company’s headquarters. Developed a “Tech Talk” presentation to educate employees and management of key vulnerabilities and mitigation procedures.Audited Vulnerability Assessment Program (VAP) for gaps and adherence to industry’s best practices. Identified weaknesses and created corrective actions and procedures. Developed relevant dashboards within Security Information Event Management (SIEM) products to aid with vulnerability analysis. Worked with associates across different teams to incorporate network management and security tools with the goal of automatic vulnerability reporting and mitigation. These processes increased the effectiveness and reliability of the VAP.Assigned as the technical project led to develop a penetration testing capability. Worked with vendors to test a “Red Team in a Box” product to provide an automated penetration testing solution. Analyzed the vendor’s product for weaknesses and Return on Investment. Presented recommendation to the IS Security Manager and CISO

Ft. Meade, Md, Us

Represented the DoD and USMC at the national TSCM school. Led the Cyber Training department; and responsible for teaching cyber threat intelligence and techniques/tool to identify cyber threats. Oversaw a diverse group of instructors from senior U.S. government service employees, to military personnel, to government contractors.Developed the course of instruction to teach cyber and cellular threat detection and mitigation to technical surveillance agents across the U.S. Government. These techniques were taught to 500+ students over four years throughout 49 different courses.Responsible for researching and replicated sophisticated cyber based attacks utilized by Foreign Intelligence in order to train TSCM personnel. These attacks were utilized by numerous government agencies to identify training, procedure, and technology weaknesses within their programs. Additionally, these attacks were demonstrated during Executive Technical Security Briefings to increase threat awareness to senior level managers. Developed and managed the cyber range for six technical surveillance exercises hosted in the U.S., United Kingdom and Australia. Responsible for overseeing the development of an enterprise level network, creating network attacks that mimicked current threats, and the conduct of Red Team operations during these exercises. During Red Team operations, utilized a wide variety of programs encompassing the most common Linux/Windows command line and GUI attack tools.Identified a technology weakness throughout the U.S. government’s TSCM program. Developed a solution which involved creating new training material, then testing and procuring relevant equipment, and implementing the training into the national TSCM school.

Washington, Dc, Us

Re-established the east coast US Marine Corps (USMC) TSCM program after over three years of inactivity. Identified manpower requirements and equipment deficiencies; worked with the USMC TSCM program office to remedy these issues. Developed the procedure for TSCM operations on the east coast. Identified shortcomings within USMC procedures to assess classified networks and developed a solution to mitigate the problem. Provided technical security support to Marine Corps and Navy assets by conducting technical surveillance surveys at over 15 locations and discovering numerous technical threats. Briefed findings and mitigation options to commanders and senior government personnel.Awarded ‘TSCM Team of the Year” in 2011 and 2012 by the Defense Intelligence Agency.

Washington, Dc, Us

Served as a counterintelligence agent. Conducted Anti-Terrorism/Force Protection operations in support of deployed forces in Al Anbar Iraq. Responsible for collecting intelligence from human sources; produced over 450 intelligence reports and 35 time-sensitive reports. Collection and reporting efforts led to the detainment of three High Value Targets and dismantlement of four insurgent cells. Created and disseminated operating procedures that detailed steps for the recruitment of human intelligence sources throughout Western Iraq.Awarded medal with 'Valor' distinction for actions taken during an ambush while on patrol in Al Anbar, Iraq.

Washington, Dc, Us

Washington, Dc, Us

Master Of Science - Ms, Information Security And Assurance

B.S. Information Technology Management