• Developed security and technical foundations for Digital Asset Securities under the Special-Purpose Broker-Dealer. • Achieved a 300% increase to NIST CSF audit score within one year.• Responsible for DevOps since 2022.• Responsible for cyber security programs for all tZERO Group subordinate business units.• Built and maintained AppSec program for secure SDLC to include static and dynamic analysis.• Established Data Governance program with asset tags, data owners and appropriate access controls.• Built vulnerability management process, with dynamic testing and scanning.• Enhanced existing EDR capabilities with custom indicators of compromise process based off threat intelligence reporting.• Established Insider Threat monitoring capabilities.• Ensured regulatory compliance for protection of customer data in accordance with SOX, SEC, FINRA and various State regulators.• Conducted gap analysis and risk assessments to establish security programs roadmap.• Conducted threat modeling and produced mind-map of tZERO specific threats.• Finalized and approved all cybersecurity policies and procedures.• Established formal cybersecurity onboarding training program and acquired PluralSight for continued team training tracks, with specific goals and milestones.• Coordinated with DevOps to ensure CIS benchmarks being followed for builds, and helped determine remediation paths during spring planning.• Coordinated all third-party audits and pentesting engagements.• Worked hand in hand with the legal team to ensure constant compliance among all regulatory bodies, and to proactively collect evidence for all required external due diligence requirements.• Conducted all cybersecurity vendor selection processes, and researched the security toolseffectiveness for tZERO-specific needs.

Advise NightDragon investment team and portfolio companies to identify and scale the next generation of leading companies in the cybersecurity, safety, security and privacy industry

Snyk Ambassadors are application security champions, leading activism in their respective communities

•Threat Embers Threat Intelligence •NFT on ERC-721 token deployment •Sparx Coin Platform in development (deployed on ethererum but discontinued)•Hyperledger Sawtooth experience •Certified LFS171x: Blockchain for Business•Certified Blockchain Expert Certification•Multiple Ethereum/Solidity contracts deployed•Blockchain Infrastructure Security•Decentralized Security Application Development•Blockchain and Cryptocurrency Security Consulting•Cyber Risk Management and Vulnerability Assessments•Regulatory Compliance Coordination

•Supervise the integration of new cloud security solutions for Cyber Security Operations Center (CyberSOC). •Based on New Technology and board approval, analyze technology and resource needs, to plan, assess and conduct proof of concepts for new security solutions.•Oversee the operational use of AWS cloud environment, maintain cost saving initiatives and ensure complete visibility and security for cloud environment.•Ensure SOC II Type II and PCI compliance for all services, and provide all evidence and documentation to pass yearly audits.•Confer with stakeholders to discuss project specifications, procedures and business requirements.•Coordinate and direct projects, making detailed plans to accomplish goals and directing the integration of security related solutions. •Plan and direct the installation, testing, operation, maintenance, and repair of Cyber SOC systems.•Direct, review, and approve product design and changes.•Document processes for all current solutions while onboarding new solutions with a high level of detail.•Develop and implement policies, standards and procedures for the engineering and technical work performed in the CyberSOC.•Decrease cost of goods sold on all our engineering services, to align with company financial goals.

·IBM Cloud Infrastructure (SoftLayer) Resident Engineer for Palo Alto Networks platform.·Cloud security solutions design, integration and configuration. ·Assist customers to achieve greater network security through the identification, scoping, implementation, and tuning of leading platforms.·Perform malware hunting for events of interest and attacks. ·Deploy IPS Capabilities utilizing identity and application information.·Troubleshoot network & system issues.·Monitor active network and server infrastructure.·Perform routine preventative maintenance on equipment.·Administer network security measures to prevent system interruptions or breaches.·Execute sensitive data backup and restoration procedures.·Document all technical procedures and user guides.

•Daily operational real-time monitoring, analysis and resolution of security events from multiple sources as a Managed Security Services Provider (MSSP).•Configure, deploy, optimize and repair security solutions from various vendors, i.e., Fortinet, Cisco, Sophos, Palo Alto, Checkpoint, and McAfee.•Cisco Identity Service Engine (ISE) management deployment and administration.•McAfee Security Incident and Event Management (SIEM) deployment and administration on cloud based solution with NSX infrastructure.•NGFW, IDS/IPS Deployment, monitoring and change management.•Custom Threat Intelligence Analysis for customers.

•Installed small business and customer networks for AT&T in Chicago, IL.•Independently repaired, diagnosed, troubleshot and repaired small business networks.•Installed and configured "business in a box" router and business firewalls. •Rated an AT&T Five Star employee for several periods.

•Contract Human Intelligence Collector (HUMINT) providing threat intelligence, situational awareness and threat vulnerability assessments for commanders operating in a combat zone.•As the Team leader, audited and monitored all access control to classified systems, privilege creep, end-point hardening, port management, zoning, password policies and removable media policies. •Security Officer for classified systems and various applications running on them. •Used social engineering techniques to spot, target, assess, recruit and develop assets for intelligence collection.•Trained assets on phishing techniques, social engineering techniques and best practices for media exploitation.•Conducted hundreds Strategic Debriefings under FORMICA program for Army Operations Activity (AOA) in support of CJ2X, Multi National Forces Iraq. •Produced hundreds of intelligence reports from debriefings/investigations in order to answer strategic level command requirements.

•Established and ran human intelligence source networks in and around Baghdad, Iraq. •Tactical HUMINT Team (THT) NCOIC/Team Leader for combat operations.•Responsible for all aspects of the cyber security of mobile classified systems used in the field.•Used tools such phishing and social engineering techniques to spot, target, assess, recruit and develop assets for intelligence collection purposes.•Full cycle project management from deploying troops to setting up operations in foreign countries.•Produced actionable intelligence leading to the detainment of numerous foreign fighters, the discovery of numerous weapons caches and the early warning of car bombs in production.