Security compliance assessmentsRisk ManagementCompany security policy reviewThreat Modeling, STRIDEPenetration testing, Web application security, Infrastructure testing and Vulnerability AssessmentsNessus vulnerability scanningTenable.io solution architecting and deploymentAWS CIS Benchmark auditing, PCI DSS penetration compliance testingOWASP top 10, NSA NIST 800-115 methodology and CVSS scoringCybersecurity Maturity Model Certification (CMMC)Web Application and REST API penetration testingNetwork Infrastructure penetration testingProficient in Windows and Linux operating systemsKnowledgeable with JSON, Bash, and PythonCertificate Services, Public Key Infrastructure (PKI)Windows and Linux based operating systemsKnowledgeable with multiple cloud vendors; Azure, AWS, OCI and GCP

- Penetration testing, Web application security, Infrastructure testing and Vulnerability Assessments- Nessus vulnerability scanning- Tenable.io solution architecting and deployment- AWS CIS Benchmark auditing, PCI DSS penetration compliance testing- OWASP top 10, NIST 800-115 methodology and CVSS scoring- Web Application and REST API penetration testing- Network Infrastructure penetration testing- Proficient in Windows and Linux operating systems- Knowledgeable with JSON, bash, python and PowerShell- Certificate Services, Public Key Infrastructure (PKI)- Windows and Linux base operating systems- WiFi and wireless Lan controllers- Recent experience with multiple cloud venders; Azure, AWS and GCP

Practice Lead of the APJ Threat & Vulnerability Management teamPenetration Testing Specialist in the following areas:• Public facing network testing• Internal infrastructure testing• Web site application testing• Individual workstation and kiosk testing • Wireless network testing• Firewall configuration and rules reviewSecurity related experience:• FireEye NX, EX, HX, AX, FX Systems Engineer• Secure perimeter network design• Security review of device configuration• SCADA and PLC design an implementations

• Security auditing and penetration testing• Product specialist with Juniper NSM, NSMxpress, SSG, ISG and Cisco ASA equipment• Network perimeter design, review and documenting security recommendationsJuniper and Cisco experience:• Juniper SSG/ISG with NSRP high availability configuration• Juniper NSM / NSM Express with high availability configuration• Cisco ASA Firewall, SSL VPN remote access, Site-to-Site VPN and high availability configurations• Cisco routers with NAT, ACLs, ADSL and HSRP configuration• Cisco switches, span port, multiple VLAN, layer 3, StackWise configurationSecurity related networking experience:• Secure perimeter network design• Security review of device configurationPenetration Testing Specialist in the following areas:• Public facing network testing• Internal infrastructure testing• Web site application testing• Individual workstation and kiosk testing • Wireless network testing• Firewall configuration and rules reviewMicrosoft PKI Certificate Services experience with:• Multiple PKI design and implementations • Offline root and online issuing CAs with nCipher HSM (Hardware Security Modules)• Custom templates with restrictive permissions to limit auto enrolment• Custom CDP and AIA setting to allow for multiple CRL locations• Machine certificate for WPA Enterprise access with Cisco Wireless LAN controllers and Aironet Access PointsOperating system experience:• Microsoft NT, 2000, 2003, 2008, XP, Vista and Windows 7• Red Hat EN 4 & 5• Linux - Ubuntu server 9.x – 10.10

Systems and Security Contractor• Penetration Testing and Security Auditing• Juniper Netscreen firewall installation• Security penetration testing • Managing Cisco PIX ACLs and VPN site–to–site links• Network perimeter design• MSSQL Server security testing and performance tuningSecurity Technical Trainer• Provided technical Train–the–Trainer and mentoring functions for future EC-Council security instructors

Technical Education Manager:• Managing a staff of 12 contract technical trainers• Managing and forecasting yearly class schedules and future course requirements• Reporting directly to company directors on customer feedback and course statuses• Liaising between sales and operations departments of new and existing courses• Organizing courseware materials and technical classroom requirements • Providing mentoring of staff members and continuing education paths for themSenior Technical Trainer for the following tracks:• CEH track (Certified Ethical Hacker)• Cisco Firewalls, Routers and Switches tracks• Microsoft Windows 2000 and 2003 Active Directory tracks• Microsoft SQL Server 2000 Administration, Transact SQL (TSQL) and Design tracksTechnical and Security Engineer:• Designed and configured PIX firewall site–to–site and remote access VPN links• Configured SSH internal connection to PIX firewalls• Installed Kiwi Syslog servers for PIX firewall logging and archiving• Installed and general configuration of Cisco switches• Implemented Windows 2003 RRAS PPTP VPN remote access for domain users with very restrictive internal network access• Designed bases for security internet use policy• Installed and configured Specter CNE solution that allowed security monitoring of desktop computers internet and instant messaging activities• Designed classroom and internet café secure network solutions

• Technical development team leader for the OneSource project• Assisted in managing the developers and networking operations team and maintained a security aware development work environment • Managed team design meetings of work with Operations and Quality Assurance (QA) teams about software changes and change control• Worked with extensive change control procedures to minimize SLA downtime• Assisted in design and integration for secure Windows Domains and SQL Server installations between DMZ• Assisted in trouble shooting customer problems with SQL, Windows and network issues• Senior database modeller for POC (proof of concept) database driven web projects• Designed database tables, relationships and SQL stored procedures• Layout of all necessary DBA tasks and practices for a 24/7 web based application• Evaluated redundant database software such as Vince/Legato clustering• Created large SQL procedures used to create test data to stress test banks middleware applications for performance and security• Implemented web based reporting with Crystal Reports Info 7.

• Industrial equipment programmer, designer and integrator for Allen Bradley PCS–5 Systems, Wonderware suite and Microsoft MS SQL projects• Provided technical sales support and maintain long term relationships with customers• Specialized in Wonderware Software, inTouch SCADA products• Installed multiple Client/Server applications linking to one or more MS SQL Server databases• Installed multiple Windows NT domains and Cisco routers to support separate factory networks • Trained customers in basic SQL database administration to assist them in becoming self sufficient with sophisticated MS SQL server automatic data collecting systems

• Design, program and implement high speed industrial PLC programs for machine controls• Specialized in Allen Bradley PLC–5 Systems programming and configuration• Installation and maintenance of industrial network in harsh production plant environments• Installation and maintenance of computerized laser scanners based on VAX and DEC hardware platforms• Customers included Auspine Ltd, Scottsdale, Tasmania

• Finishing Rank: Non–commissioned Office, Sergeant (E–5)• MOS 5945 – Aviation Radar and Microwave Technician• MOS 2831 – Microwave communications Technician• Responsibilities included maintaining remotely deployable tactical 3 dimensional long range radar equipment (AN/TPS–32)• Team lead for 5 Marines in the technical shop• Maintenance of IFF Mark XII crypto gear• Maintenance of highly mobile line of site microwave communication equipment• Assistant marksmanship instructor• Security clearance achieved: Secret