Skylar "Csp3R" Lyons Email & Phone Number

Gambrills, Md, Us

Gambrills, Md, Us

Gambrills, Md, Us

RedLion is a top-shelf Information Security consulting firm with unprecedented access to the highest caliber hackers the industry has too offer. From basic vulnerability scans to compliance validation to full-scope enterprise architecture design, Red Lion has the right person to complete your project on- time and on-budget.

University Park, Pa, Us

Warwick, Ri, Us

Reston, Virginia, Us

● Created partnerships with likeminded organizations to develop what we termed Ring Zero Protection Suite (ROPS).● Utilized extensive personal connections to negotiate and close over $500k in contracts for past performance record.● Identified trendsetter ideas and attended sponsored industry conferences to stay ahead of emerging technologies.● Implemented smart marketing tactics by reevaluating website design, starting social media initiatives and setting up media engagements to promote the brand.● Led product development sales and marketing initiatives to widen the scope of existing verticals.● Stepped in to manage company needs when CEO was unavailable.● Pushed professional IoT devices sales and brand awareness at major information security conferences.● Led massive man-power based projects through to success.

Reston, Virginia, Us

Ashburn, Va, Us

Technical Leadd Cyber Network Operations • Technical lead of commercial information security engagements, including penetration tests, GAP Analysis and security strategy analysis• Provided general oversight of team personnel.• Executed Red-Team Capture-the- Flag projects.• Developed strategic business partnerships and acquired new clients.• Provided oversight to 853 audits for federal entities.• Interfaced with Senior Executives to communicate objectives and related outcomes.• Worked with the product lead for Xacta, a primarily DOD risk management automation tool, to increase the compliance set to include PCI, SOX, BASIL2, ISO27000, and SASE16.

Security BSides is a framework of events that enables individuals to expand the spectrum of conversation beyond the confines of traditional media. Frameworks such as BSides allow individuals to drive the event, shape the media, and most importantly encourage participation. BSides are community-organized events put on by local individuals with the expressed goal of enabling a platform for information dissemination. BSides is an ‘unconference’ that follows an ‘open spaces’ format. This varies from structured presentations to smaller break-out groups, but both provide a direct connection between speakers and the audience.

White Marsh, Md, Us

• Architect for vulnerability identification program, which reduced cumulative vulnerabilities by 80% within 6 months.• Spearheaded initiatives that required employees to think beyond fulfilling minimal compliance requirements.• Worked closely with compliance teams to ensure federal PCI and FISMA regulations were met.• Developed metrics to support current and future security initiatives.• Remediated ongoing issues with networking equipment in global offices remotely.• Wrote capital expenditure documents required to purchase multiple security tools.• Realigned Information Security Personnel goals to match executive goals.• Created departmental strategy and roadmap to enhance overall security posture.• Mentored junior security personnel on more advanced security concepts.

Mclean, Va, Us

New York, Us

Driving force behind innovative thinking through challenging the limits of preexisting norms. • Developed the Computer Incident Response Methodology (Policy, Plan, Playbook), which lead to increased interdepartmental collaboration. This plan includes 60 trained people, across 15 global teams.• Managed incident response from outside threat-actors to protect the brand and infrastructure. This required interfacing with law enforcement (FBI) and partner companies, including social media outlets.• Assisted in authorship of the company’s three and five year roadmaps. These roadmaps focus on securing data centers, local offices, and various web-based technologies.• Analyzed cutting-edged technologies that would affect corporate security posture, as well as protecting against unknown risk. • Interfaced with global teams to implement technologies that align with the current security strategy. One strategy included the need for comprehensive vulnerability and risk management with Internet facing sites across all business units. Provided metrics on vulnerability assessments and recommended remediation activities.• Reviewed information security controls to ensure maintenance of SOX compliance.• Brought in multiple vendors to perform computer security awareness training for larger IT staff.

• Provided Vulnerability Assessment Data for C&A efforts• Provided Incident response and forensic capabilities• Monitored networks for Intrusion• Conducted wireless sweeps• Conducted penetration assessments • Evaluated the operations and maintenance costs of systems• Provided recommendations to improve current security of systems• Provided impact assessments to current infrastructure

• Scripted the incident response program for USDA• Managed a team of 7 people for incident response and vulnerability assessment• Aided in the development and deployment of SOC infrastructure through out the USDA environment• Worked to develop a new network for USDA systems with Active Directory because the current system was over run with intruders

• Penetration testing of networks for possible security breaches.• Preformed Digital media analysis of systems that were deemed un-recoverable• Developed the documentation to support existing processes• Reviewed Documentation (OMB, NIST, and DHS), Logs, Rule sets, System Configuration checks• Worked to eradicate viruses across the network• Identified and removed malicious E-mail from exchange servers• Handled both unclassified and classified material to contain and mitigate spillages• Developed processes for decision-making and prioritization of systems• Coordinated remediation efforts between high level federal employees and contractors• Applied network knowledge to gain foresight into complex problems that arise on the network• Coordinated internal program review between department heads for Lockheed• Maintained and upgraded systems that were in use by the SOC• Worked to develop the DHS environment• Provided system administration• Worked with ArcSight, Snort, Encase, Bit-9, EOC Online• Ensured compliance with DHS 4300 across the network• Provided oversight for other analysts in day to day activities

• Reviewed Documentation (OMB, NIST, and DHS), Logs, Rule sets, Network Sniffing, and File Integrity Checks.• Identified and utilized techniques such as network discovery, network port / service identification, vulnerability scanning, wireless scanning, and application security testing.• Scripted test planning such as identification of information systems, security test approach, security test logistics, Rules of Engagement (ROE) development, coordination of legal considerations.• Provided test execution to include coordination, testing, analysis, and handling of data.• Participated in and coordinated post-test activities such as mitigation, reporting, and remediation/mitigation recommendations.• Coordinated the development and maintenance of information security policies, standards, and procedures• Developed processes for decision-making and prioritization of systems for security testing• Worked with the CISO to mitigate risk across federal wide systems and programs. • Was instrumental in achieving a 91% FISMA Effort score for the infrastructure.

• Penetration testing of networks for possible security breaches.• Developed network diagrams for controlled network.

Master Of Science (Ms), Computer And Information Systems Security/Information Assurance

Bachelor Of Science (Bs), Information Systems And Technologies

Cissp, Information Security