David Spehar Email & Phone Number

Pittsburgh, Pa, Us

Mountain View, Ca, Us

Mountain View, California, Us

Cranberry Township, Pa, Us

Internal ITAt Westinghouse Electric Company LCC, I perform various security-engineering roles. Specifically, I focus on network engineering and architecture. This includes design, review, and implementation of various appliances, migration of current bare metal cyber security appliances to the cloud, and development of new cyber security projects.• Develop Westinghouse technology roadmap and strategy in-conjunction with Enterprise architect. • Network Architecture engineering and review. • Configure and implement security technologies into the Westinghouse network. • Collaborate with other departments involving security device integration. • System administration of Westinghouse security devices. • IDS and packet capture device deployments at ingress/egress points company wide. • Various security appliance systems engineering tasks including back-end troubleshooting, health checks, system updates, application plugins, etc. • Design, integrate, and implement a variety of security stacks and appliances.

Cranberry Township, Pa, Us

North America Cyber Security DepartmentIn this role, I interfaced with Westinghouse customers and worked with ICS equipment in air-gapped environments. I performed various security-engineering roles. Specifically, I specialized in technical configuration and implementation of various devices such as network switches, SIEM/NIDS, vulnerability scanners, system backup applications, and virtualization into nuclear environments. • Design and/or review of Westinghouse cyber security systems. • Configuration, testing, and implementation of cyber security systems for various nuclear power plants. • Design and/or review of network architecture. • Test and configure a multitude of applications and devices including switches, firewalls, SIEM, IDS/IPS devices, network access control, application control, device control, backup/recovery, and vulnerability assessment software. • Hardening of Ovation, Cyber Security appliances, and network devices. • Conduct research and testing of new security applications or appliances for future implementation. • Taught on-site SIEM training for customers. • Audited Westinghouse’s internal development infrastructure for adherence to regulations and guidelines. • Creation of technical implementation guides, hardening guides, and customer specific administrator guides. • Mapped compliance matrices for NEI 08-09 and RG 5.71 to ISO 27001 and IEC 6245 regulations.

Omaha, Ne, Us

At NTT Security Inc., I performed incident response and security investigations accordingly with various phases of the Incident Response Cycle. I. Investigation and reporting in the Detection and Analysis phase. II. Investigation in the Containment, Eradication & Recovery phase. III. Perform network forensics in the PostIncident Activity phase. • Perform security incident response through network forensics for critical security events and network outages of client’s Information Systems. • Assess, prioritize and differentiate between potential intrusion attempts and false alarms. • Perform tuning of Snort based rule filters to continuously improve monitoring. • Analyze data through network forensic techniques from a variety of network and host-based security appliance logs including anti-virus, data loss protection, firewalls, intrusion detection software to determine the outcome and appropriate action for each incident. • Stay up to date with Global Threat Intelligence reports and daily security news sites for emerging threats. • Perform client requested log searches for compliance audits, security event analysis, and incident response.

At Mine Safety Appliances Inc., I performed various Security analyst and Security administration roles. I was in charge of multiple software testing and implementation projects. I performed external threat / social engineering analysis alongside testing of onsite employee’s susceptibility to threats on the wireless network. I performed routine Active Directory audits on user privileges, Group Policy Objects, etc• Placed in charge of initiating, implementing, and testing two-factor authentication solutions for VPN users, amongst other implementation projects. • Followed planned software implementation procedures for official or proof of concept software and proper change management for application rollout. • Assess application security threats and vulnerabilities by analyzing packets through Wireshark. • Perform network scans using Nmap to evaluate open ports and running services. • Assess workstation and server vulnerabilities through use of Nessus. • Investigated security risks associated with metadata on public files and susceptibility of social engineering through use of Maltego. • Utilized the Hak5 WiFi Pineapple to gauge threats awareness and potential data loss via rogue access points. • Audited user and service accounts for security configuration issues, security permissions, and appropriate GPO policies. • Performed network analysis and investigation into security related events using Splunk.

Pittsburgh, Pa, Us

Bachelor’S Degree, Information Technology; Conceration: Cyber Security

Bachelor’S Degree, Imaging Sciences

Associate Of Science - As, Radiological Sciences