David Dasilva Email & Phone Number

Bernards, Nj, Us

Mclean, Va, Us

New York, Ny, Us

New York, Ny, Us

• Managed the vulnerability management program, utilizing tools such as OpenVAS, and Nessus to detect, report, and correlate vulnerability and risk information.• Authored numerous information security and technology policies and procedures focused on obtaining regulatory compliance with HIPPA, ISO, and IRAP standards.• Assisted with the development and delivery of Security Awareness material and presentations for distribution across the organization.• Planned, architected, and implemented the installation of corporate LAN and WAN systems, linking multiple remote offices and users.• Configured Fortinet FortiOS firewalls, Juniper Junos OS switches, and Aruba WiFi Controllers with ACLs, VLANs, VPN, and WiFi policies.

Jersey City, New Jersey, Us

• Support business lines by providing information security oversight, input, and assessments on projects and the deployment of emerging technologies. • Manage the Infrastructure Vulnerability Management Program by coordinating remediation efforts between business owners, application teams, technology support organization. Coordinate global assessment activities and serve as the Subject Matter Expert (SME) during review of internal controls.• Work with system owners to ensure vulnerabilities and exposures are sufficiently mitigated to comply with policy and maintain risk at acceptable levels. • Provide input and oversight of the Data Loss Prevention (DLP) program focusing on the protection of highly confidential information, intellectually property, and the reduction of false positives. • Serve as the information security SME in response to requests for information from clients, regulators, and/or auditors. • Maintain knowledge of all applicable standards, policies, and regulations in order to respond to security related questions and supplement associate training and awareness as needed. • Provide Information Security incident response leveraging internal teams and SMEs.• Evaluate non-standard access requests for compliance with policy and best practices. Work with key stakeholders to identify solutions without introducing undue risk.• Evaluate firewall changes for security risk and compliance with standards prior to implementation.• Develop and deliver security training to new and existing associates.• Provide security auditing of platforms or environments as requested.Develop and maintain scorecards, dashboards and presentations that depict risk posture.

New York, Ny, Us

• Created standards documentation for essential infrastructure processes including project plans, configuration guides, and reference materials.• Created and maintained a baseline system configuration to assist in the rapid deployment or repair of new infrastructure assets.• Responsible for coordinating infrastructure upgrade projects, including a system refresh involving 400+ users across several locations.• Maintained SQL database used to track the progress and cost efficiency of ongoing technology projects.• Provide daily support for 450 end users and ongoing maintenance of 1000+ devices.• Worked alongside the helpdesk and other technology groups to ensure issues were adequately corrected and documented in a timely manner.• Provide Domain administration including user accounts, email accounts, and file share access control.