Daniel Hammon, Cissp, Mba Email & Phone Number

San Jose, California, Us

Remote First Company, Us

Information Security • Conducted ~2 incident response and digital forensics investigations per month • Integrated data streams from various systems and developed monitoring rules for the system information and event manager (SIEM) • Triaged and analyzed several SIEM alerts daily handling levels 1-3 investigations • Managed private access and cloud access security broker (CASB) rules in zero trust solution • Developed and implemented attack surface management program • Prepared information security risk metric tracking, risk register, and c-suite reporting • Reduced vendor/tooling costs 60%/~$400k through negotiations and value analysisApplication Security • Expanded Security Champion program to 25 members in an engineering department of 300+ • Implemented Code Security program detecting and mitigating 10k’s secrets leaks • Established CI/CD security program actively monitoring 100s threats and vulnerabilities • Managed an international team of 3 application security personnel by triaging and treating thousands of material security weaknesses found in company’s infrastructure and applications • Implemented dynamic application security testing (DAST), static analysis security testing (SAST) against SPA/MVC web applications and API endpoints through DevSecOps practices • Created dependency management and software composition analysis (SCA) programs • Conducted internal penetration engagements finding dozens of security vulnerabilities, managed external penetration testing, and ensured remediation of issues • Performed OWASP application security verification standard (ASVS) and secure code audits • Architect and deploy secure cloud solutions using Terraform/SAM infrastructure as code (IaC) • Developed interactive Secure Coding training program and threat modeling program • Integrated cloud security posture management (CSPM) and engineered solutions

Sacramento, California, Us

• Developed coursework and lectured two upper division classes, Computer Forensics, Cyber Attacks and Countermeasures, in an esteemed and accredited university • Instructed multiple classes by engaging students, presenting lectures, and demonstrating custom labs such as buffer overflows, forensic software and image acquisition, OWASP threats, system hardening, privilege escalation, and countless more • Student Advisor for the university’s Cyber Defense Club overseeing 30 students and advising the student board’s initiatives • High student satisfaction scores of 4.8/5 across all metrics

Eugene, Or, Us

• Instructed dozens of students cyber skillsets in 6 month course, 4 hour classes, 3 nights a week• Curriculum includes GRC, Cryptography, Network Security, Cloud Security, Web Security, Pentesting, SIEMs, and Digital Forensics.• 90% class retention rates • Consistently achieved high student satisfaction rates of 4.8/5• "Highest student satisfaction rank compared to any development or cybersecurity cohort ever, by far"

San Bruno, California, Us

◦ Design and implement security and response policies, procedures, practices for several simultaneous and large financial institutions ◦ Interface with dozens of third party auditors, regulators and stakeholders ◦ Created and executed Board of Directors security training ◦ Performed 3rd party/vendor and technology security reviews analyzing penetration reports, SOC2s, contracts, and policies/procedures ◦ Performed countless security risk assessments using risk management frameworks (FFIEC, CIS, ISO 27001, NIST, etc) and remediated findings on complex networks and legacy technologies ◦ Designed and conducted technical and table top incident response exercises using active threats and detection ◦ Review and procurement of cyber liability insurance and integration with incident response programs ◦ Defined and monitored several security risk metrics against thresholds to provide meaningful and actionable information to key stakeholders ◦ Continuity of business and disaster recovery planning and testing ◦ Implemented outage reporting process by consolidating communication channels and improved response and recovery times to business units

San Bruno, California, Us

◦ Focused IT operations using ITIL principles◦ Streamlined 3 IT ticketing systems into 1 (Atlassian Service Desk)◦ Increased business productivity by improving IT operations cutting average user ticket volume in half◦ Hardware refresh 600 PCs in 50 locations across the US in 2 weeks◦ Telco service cost analysis and streamlining of ~600k savings◦ Continuity of business and disaster recovery planning and testing◦ Implemented outage reporting process by consolidating communication channels and improved response and recovery times to business units◦ Designed and installed configuration management database management of ~7k assets adding business value to IT operations and cost accounting◦ Created catalog of services, cost accounting and pricing of services, contract and statement of works, and invoicing ◦ Prepared network diagrams and technical documentation in wikis to streamline knowledge bases

San Bruno, California, Us

◦ Conducted purple team exercises against networks and web applications finding and fixing many high severity security flaws ◦ Vulnerability management and penetration testing against a dozen domains and networks including cloud networks (AWS) ◦ Combat active attacks through detection and threats analysis from phishing and malware campaigns against company targets ◦ Performed malware analysis and forensic investigations ◦ Designed and implemented secure coding practice training for 50+ developers ◦ Management of SAST (Fortify) and DAST (Whitehat) DevSecOps solutions ◦ Conducted domain password and Active Directory audits

San Bruno, California, Us

Molti.com (FKA DocIT.com) provided by New Logic (FKA Bayhill Software, Inc.)• Led SOC2 (5 Trust Principles) certification process to completion in 6 months• Established Information Security, Business Continuity/Disaster Recovery, and Incident Response policies, procedures and processes• Executed Privacy Shield enrollment and compliance• Revised and published privacy policies and processes• International Association of Privacy Professionals (IAPP) member• Designed, implemented, and performed security assessments and reviews

Greater Denver, Co, Us

• Established and maintained Institute of Internal Auditors accredited (QAR) department• Conducted IT, Information Security and Business Continuity audits• Designed risk based audit plans and schedules• Frequently reported and presented to the Board of Director’s Audit Committee, as well as the full board, the status of the audit plan and the organization’s risks• Implemented audit reporting and control weakness tracking systems; oversaw and verified corrective actions• Managed every process of the audit life cycle including conducting special reviews and participating in enterprise risk management functions• Prepared audit reports, work papers, and organized support documentation• Interfaced with process managers and executives within audit scope• Attended several IIA workshops, trainings, and conferences• Mentored and coached audit team members while establishing succession

Greater Denver, Co, Us

• Underwriting, pricing and accretion modeling of several loan portfolios totaling ~$200 million• Performed interest rate risk modeling for the bank including custom analysis to drive balance sheet decisions• Managed a $2 billion inventory of collateral for various lending channels and customers • • Mortgage underwriting up to $5 million/day (conforming-jumbo)

Mba, Finance

Bs, Business (General Management)