Analyzing and strengthening the layers of security in Diabetes medical devices (meters, pumps, applets, mobile apps, web apps) from early development, threat modeling, requirements & mitigating controls development, policies, security assessments, penetration testing, and operational security preparations. Providing security consulting to the Product Owners and Managers (Marketing and Operations) to aid in more tightly integrating security into the whole SDLC.

Providing computer security consulting services for individuals and small businesses focusing mainly on risk management of data/PII/PCI, training on security awareness, hardening systems, cleaning malware infections, and providing extended remote monitoring services for patch management and AV.

Performed network security monitoring, threat/malware analysis, developed effective metrics/reports, and normalized/accelerated processes via scripting/automation for a global Fortune 500 enterprise. Continually drove forward everyone’s bar for higher quality IT security and risk management practices through development of simple, repeatable processes, tuning of tools, and honing of security & business knowledge.

Performed network security monitoring for 130,000 hosts globally via Intrusion Detection Systems (IDS), Vulnerability Management (VM), host-based AntiVirus/AntiMalware/firewalls, Application Whitelisting, advanced network-based anti-malware, and other security tools.Service Lead on two IDS technologies, network anti-malware systems, host-based firewalls, and Vulnerability Management. These included full administration of service, life-cycle management, budgeting, rule management, and documenting/training new staff. For the last year, this included a Technical Lead role for the team’s tools/services, focusing on documentation, training, and transition from a local focus toward a new global team. Also provided security consulting on IT & business projects.

Developed a client-side security team from Deskside Support, expanding scope from 2 sites/4000 PCs to 8 sites/12,000 PCs over the course of 3.5 years.Created a ground-up service for IT focusing on process documents and developing in-depth knowledge of patching, malware cleanup and post-recovery, AV client management, software firewall client management, and banned software.Developed this group into a $2M/year cost avoidance in IT support and customer time loss.Supported major client security software upgrades including an AntiVirus product update for eight company sites.