Chris Herrera Email & Phone Number

United States

Santa Monica, Ca

• Develop and implement solutions to enforce security policies and audit controls• Lead vendor research, candidate selection, and proof-of-concept demonstrations to ensure purchased security hardware and software adequately satisfy company requirements• Coordinate internal and client-run penetration testing efforts; manage remediation of findings with developers, senior management, and other stakeholders• Perform vulnerability scans with Nessus and Qualys; work with developers to address findings• Manage network security monitoring devices, including intrusion detection system (IDS) and web application firewall (WAF)• Author technical security documentation necessary for achieving ISO 27001 certification• Perform security updates to critical servers in corporate, test, and disaster recovery environments

Greater San Diego Area

• Oversaw government and contractor testing on simulated shipboard environments, ensuring complete functionality with Host Based Security System (HBSS) to monitor, detect, and defend against attacks to U.S. Navy computer networks• Assisted with Navy-wide acceleration efforts to advance the timeline for installation of HBSS on all ships by training installers and developing firewall, intrusion prevention system (IPS), and application blocking security policies• Set up and maintained simulated laboratory environments in VMware ESX for testing, policy consolidation, and Tier IV HBSS tech support for all U.S. Navy customers• Engaged daily with senior leadership, government stakeholders, and external contractors by presenting test findings, giving presentations and training, and performing hands-on technical troubleshooting• Researched digital certificate revocation capabilities in limited-bandwidth offshore environments to maximize efficiency and reduce transmission overhead and processing time• Created and maintained an internal SharePoint site for better collaboration among multiple sites, vastly improving sharing, communication, and data backup capabilities• Developed a presentation on the importance of Information Assurance (IA) targeted at high school students to spread awareness, increase interest in IA, and experience live demonstrations of vulnerability exploitation (mobile phone/email hacking and password sniffing)

Greater Los Angeles Area

• Provided engineering support to Global Positioning System (GPS) satellites and receivers to achieve tactical communication security and enhanced location precision among U.S. military ground troops.• Assisted in development of automated tools to streamline and modernize Department of Defense (DoD) compliance and assessment requirements per the DoD Information Assurance (IA) Certification and Accreditation (C&A) Process (DIACAP).• Interfaced daily with U.S. Air Force customers, stakeholders, and private contractors to ensure mission assurance category and confidentiality level designations were sufficient and appropriate to guarantee substantial levels of communications security.• Compared contractor proposals with DIACAP to determine which specific IA controls were being met and which vulnerabilities remained to be remediated.

Greater Pittsburgh Area

• Assisted with development of a remote computer forensic suite known as CERT’s Clustered-Computing Analysis Platform (C-CAP).• Wrote custom scripts to interact via command line with Symantec Ghost Solution Suite to create/clone/delete/edit hard drive images and manage user administration and network deployment tasks to achieve maximum operational efficiency and reduce the time and energy previously required to reimage computer systems.• Implemented multi-platform (Windows/Linux) system logging with to ensure all critical events were recorded for security auditing in a timely manner with minimal use of system resources.• Performed thorough testing and simulation in VMware prior to assembly in a production environment to minimize laboratory deployment time and facilitate dynamic system modifications.

Greater Pittsburgh Area

Course titled "Decision Making Under Uncertainty"• Graduate-level course on probabilistic risk analysis, optimization, and operations research.• Provided lecture-supplemented instruction and tutorials for students in addition to holding regular office hours to discuss general homework/exam/course concerns.• Created and graded homework and exam solutions

Washington D.C. Metro Area

• Researched cyber crime in the U.S. – its impact, efforts to combat, and challenges faced in combating.• Had sole responsibility for coordinating with Federal Inspectors General to determine their effort levels, experiences, and lessons learned in dealing with the problem of computer- and Internet-related crimes.• Performed extensive comparison and analysis of public and private sector responses to cyber crime and presented findings to senior leadership for incorporation into the organization’s overall security posture and future recommendations for the entire U.S. government.

Bachelor Of Science (Bs), Management Science And Engineering

Master Of Science (Ms), Information Security Policy And Management

Graduated with Distinction.

Master Of Science - Ms, Information Security Policy And Management