Christopher Correll Email & Phone Number

Auburn, Wa, Us

Manages the Cybersecurity Program to ensure compliance with OCIO Security Standards and Payment Card Industry Data Security Standards (PCI-DSS).Develops plans and manage tasks for all security audits and evaluations for the division.Coordinates tabletop exercises to test and evaluate organizational incident response plan.Facilitates remediation of penetration test findings to ensure rapid threat mitigation.Manages the organization vulnerability management program.

Denver, Colorado, Us

Analyzed, documented and reported on potential security incidents identified in customer environments.Worked with partners to maintain an understanding of security threats, vulnerabilities, and exploits that could impact them.Addressed security events that required urgent response, containment and remediation.Provided analysis and enrichment as part of a Managed Security Services (MSS) offering on various security enforcement technologies (SIEM - Devo, Splunk, Exabeam, Carbon Black) , firewalls, intrusion detection systems, vulnerability scanners etc.).Actively researched current threats and attack vectors being exploited in the wild.Working with associate analysts to perform investigations.Actively contributed to KB's and SOP's.

Seattle, Wa, Us

Worked to analyze email flows in conjunction with security policies and architectural strategies to ensure secure communications.Ensured the secure configuration of DMARC, DKIM and SPF in accordance with industry best practices for over 500 senders.Coordinated with third party vendors to block impostor domains and expand the Costco domain portfolio.Administrated the ProofPoint Email Security Gateway to ensure proper configuration and blocking of threats.

Seattle, Wa, Us

Worked analytically to solve both tactical and strategic problems within the vulnerability management program.Planed, developed, configured, and executed vulnerability scans using tools such as Tenable-Nessus on a wide variety of global corporate and business information systems both on-premise and cloud based.Collected and aggregated information from a wide variety of sources and formats, monitored and provided metrics on threat level of vulnerabilities.Identified attack surface reduction opportunities through vulnerability data analysis.Established rapport with other IS teams to mature the vulnerability management program.Actively contributed and participates in team activities and planning in regards to improving team skills, awareness, communication, reputation, and quality of work.Effectively collaborated and communicated with Compliance, Internal Audit, the Business teams and others to identify, analyze, and communicate risk and provides support around vulnerability management within their business requirements.Identified, developed, and implemented mechanisms to detect vulnerabilities and how they may lead to corporate incidents in order to enhance compliance with and support of security standards and procedures. Coordinated with Incident Response team to remediate security incidents as needed.

Seattle, Wa, Us

Facilitated the pentest process between vendors and the business.Performed project and vendor security assessments and threat modeling.Assessed centralized user and configuration management systems.Performed/coordinated regular security assessments of existing or new infrastructure.Worked with information systems custodians (i.e., department managers, user community and systems administrators) at different levels in the organization to understand their respective security needs and assist with implementing practices and procedures consistent with Costco’s Information Security Policy.Assisted with auditing of information systems activities and systems to confirm information security policy compliance and provide management with security policy compliance assessments.Worked with stakeholders to identify security solutions that support their business requirements.Partnered with other Information Security groups to conduct security risk assessments on new solutions and systems, periodic security risk assessments on existing systems and identify and/or recommend appropriate security countermeasures and best practices.

Monitored the organization's networks for security breaches and investigated violations to identify corrective actions.Installed and used software, such as firewalls and data encryption programs, to protect sensitive information.Prepared comprehensive reports that documented security breaches.Risk assessments to look for vulnerabilities in casino IT systems and data processing systems.Researched the latest IT security trends.Developed security standards to identify weaknesses and recommended best practices for the organization, continually updating standards for changes in the technology environment.Researched new products and recommended security enhancements and purchases.Submitted written reports to IT Manager regarding integrity issues.Trained end users where needed to meet the needs of the organization.Assisted in creating, testing and implementing network disaster recovery plan.

Supported Project Management, IT, Engineering, and other entities with tracking Cybersecurity IA related milestones on projects.Developed and created documentation and artifacts in support of obtaining a favorable Authority to Operate (ATO) for the system(s) required on projects.Used Group Policy and Registry configurations to harden systems prior to shipping to their installation destination increasing efficiency of projects.Managed RMF schedules and milestones per project in coordination with system owners, customers, IA personnel, and stakeholders.Maintained documentation library, policies, procedures, and guidance for company relating to cybersecurity, RMF, and information assurance.Assisted IT, HR, and Operations in creating company policy, training, and other awareness initiatives.Assisted with proposal development and other procurement or solicitation activities.Participated in training and development in the area of CS and IA, included IT related skillsets.

Auburn, Wa, Us

This degree provides students with the opportunity to acquire a deep technical foundation and competency in network administration and security. Students will learn how to plan, implement, administer, and support appropriate information technologies and systems to help an organization achieve its goals and objectives. Information technologies and systems may include: servers, client computers, mobile devices, operating systems, network applications, local area networks, wide area networks, wireless networks, network segments, intranets, and so on. Students will learn how to analyze the security vulnerabilities of an organization’s IT resources, and how to plan and implement security measures and practices for those resources.

Navigated BMW diagnostic software to effectively diagnose and troubleshoot service issues, conduct oil changes, brake jobs and minor bodywork.Demonstrated expertise preparing equipment, vehicles and shop for start of the workday as well as support parts inventory functions including ordering and cataloguing components utilizing BMW point of sales programs.

Fort Liberty, Nc, Us

Charted a successful course of maintenance ensuring continuous operation of generators via annual and quarterly services, identification and repair of potential breakdown issues and troubleshooting of system faults.Operated in high stress environments conducting field operations safely supplying power to my assigned unit.

Organized and facilitated secure currency transfer from the Federal Reserve and central banks tracking shipments using RFID and barcode scanning systems and conducting daily route check-in at completion.Liaised with customers, the public and team members while successful completing routes without direct supervision. Maintained necessary weapons qualifications.

Arlington, Virginia, Us

Charted a successful course of maintenance program ensuring continuous operation of units via annual and quarterly services, identification and repair of potential breakdown issues and troubleshooting of system faults.Controlled issuance of specialty tools to mechanics, inventory audits and reordering of broken or missing tools.

Bachelor'S In It Networking And System Security, Information Technology

Associate Of Arts And Sciences (Aas), Natural Resources Water Quality