David Hazar Email & Phone Number

Draper, Ut, Us

Boston, Ma, Us

Providing recommendations, answering questions, and consulting for IANS' customers on topics and efforts related to Application Security, Vulnerability Management, Cloud Security, and Identity and Access Management.

Wilmington, Delaware, Us

Next Level3 provides a simple, but revolutionary approach to account security. If you are interested in finding out more about how you can add another layer of protection for your employees and customers, please reach out. Our technology allows users to lock their accounts when not in use so they have control over when and even where those accounts are available for use. After all, they know when they are going to be logging in. They also get more visibility into what is happening across protected accounts, which can help them help you cut through the noise and identify and respond to threats.

Focused on providing solutions to the many challenges companies are facing today in improving and maturing their security programs through the implementation, automation, or orchestration of existing capabilities and technology.Services include design, implementation, optimization, customization, and/or automation in the following areas: - Vulnerability Management (Qualys, Tenable, Nexpose, etc.) - Application Security (Micro Focus Fortify, IBM AppScan, Checkmarx, CA Veracode, WhiteHat Security, etc.) - Cloud Infrastructure as Code (HashiCorp TerraForm, AWS CloudFormation, Azure Resource Manager)Related services - Web Application Penetration Testing - ServiceNow Security Operations Vulnerability Response & Incident Response implementation and development - Custom Reporting & Database Query Development/Optimization

Rockville, Maryland, Us

SANS Certified Instructor teaching the following courses:- MGT516: Building and Leading Vulnerability Management Programs (Co-Author)- SEC540: Secure DevOps and Cloud Security Automation- SEC549: Enterprise Cloud Security Architecture (Co-Author)

Rockville, Maryland, Us

SANS instructor teaching the following courses: - DEV540: Secure DevOps and Cloud Application Security - SEC545: Cloud Security Architecture and Operations - DEV544: Secure Coding in .NET: Developing Defensible Applications - SEC542: Web App Penetration Testing and Ethical Hacking - DEV522: Defending Web Applications Security Essentials

Worldwide, Oo

Senior Manager in Deloitte Advisory's Cyber Risk Services practice with a focus on vulnerability management, application security, and secure development services

Worldwide, Oo

Manager in Deloitte Advisory's Cyber Risk Services practice with a focus on application security.

Austin, Texas, Us

Lead application security efforts for Oracle's RightNow division.

Develop, support, and assess enterprise security for Healthagen's growing portfolio of businesses which include solutions for:• Accountable care • Health information exchange • Clinical intelligence and care management • Mobile consumer engagement • Wellness and cost transparency tools • Family caregiving

Salt Lake City, Ut, Us

Responsible for IT security consulting and risk management for the Church’s ecclesiastical division;directly responsible for managing risk and providing ongoing security consulting for six portfolios within this division.Key Achievements• Provided assigned portfolios and business units a central point of contact for interfacing withsecurity and requesting security services.• Trained multiple teams in secure coding standards, static code analysis (HP Fortify), and dynamic application analysis (IBM Rational AppScan/HP WebInspect/AMP).• Performed detailed risk assessments for high-risk solutions including recommendation ofcontrols to mitigate identified risks.• Performed application and network vulnerability scanning and penetration testing on high-risksolutions as part of the overall risk assessment process.• Developed security controls to mitigate the risk of storing sensitive PII on mobile devices.• Worked with the Privacy Office to ensure worldwide privacy concerns were addressed duringthe solutions delivery process.• Developed enterprise security dashboard requirements and managed project to acquire datasharing approvals and automate reporting.

Draper, Utah, Us

MetaSource, LLC is a leading provider of data capture and business process outsourcing. The company was formed by the merger of two companies (Data Services Direct and Mackin Imaging Systems) and the later acquisition of a third company (Capture Resource). The Senior Manager position was created soon after the merger to provide direction and standards for the IT infrastructure and security of the growing organization. The company has locations in Bristol PA (2 locations), Draper UT, Mesa AZ, Tijuana Mexico, and Toronto Canada. Key Achievements • Proposed and implemented enterprise-wide security and infrastructure plan including site-to-site connectivity, directory services, email integration, mobile communications, network segregation and security, etc.• Planned and performed consolidation of servers into a virtual environment to ease administrative overhead and to provide cost savings through reduced hardware and licensing costs.• Proposed and implemented enterprise-wide telecommunication solution. Evaluated multiple vendors and implemented a solution that would provide total-quality voice to all locations while leveraging the cost savings of VOIP. Savings in telecommunications costs identified as part of the analysis will pay for the system in less than two years.• Proposed, tested, and implemented a solution in the Tijuana production facility to replace desktops with thin clients and to virtualize the facility’s servers.• Completed yearly SAS 70 Type II audit and proposed and implemented solutions necessary to become PCI compliant.• Analyzed, proposed, and implemented a call center platform to service the growth needs of one of our largest clients. Thin clients were used to ease administration and this eliminated the need to hire additional staff to support the growing client.• Manage IT Infrastructure and Security group with employees in Bristol, Draper, and Tijuana; Mesa and Toronto are administered remotely.

Provo, Utah, Us

Recruited as lead analyst for the City’s public safety division; assigned to maintain, improve, and secure network and voice infrastructure; promoted to lead and manage technical support group in addition to my public safety and network responsibilities.Key Achievements• Part of review board that evaluated and recommended multi-million dollar emergency services telecommunication equipment as part of an equipment refresh and to comply with new laws for tracking the location of cell phones (E911 Phase 1 and Phase 2).• Maintained public safety network, equipment, and systems including 75+ mobile units.• Upgraded, maintained, and reviewed city’s network and security (Over 10 locations connected by a private, fiber-optic network).• Proposed, implemented, and maintained a solution to manage and control desktops throughout the organization.• Assisted in the upgrade of the city’s telephony infrastructure; thereafter, managed telephony and administered the entire system.• Administrator for all Microsoft SQL Server 2000 and 2005 servers.

Hired to manage network and also to assist in software development;Key Achievements• Planned and oversaw the relocation of IT infrastructure to a new facility for the Utah division of the company; this included determining power, cabling, and other specifications and meeting with builders and contractors to ensure successful completion and compliance with specifications.• Designed system using web services to retrieve and track progress of workers compensation claims as they went through the data capture process.• Administered and maintained all servers, switches, routers, etc.

St George, Ut, Us

Hired to assist in the analysis and development of internal and external applications to support SkyWest business processes; all development was performed using C#.NET, ASP.NET and Microsoft SQL Server 2000.Key Achievements• Designed web application to estimate aircraft weight and balance based on formulas in the aircraft manuals.• Assisted in the re-development of the aircraft inventory and maintenance application.

Hired as a programmer during my schooling and worked my way into positions of greater importance;• Managed project setup and deliverables for call center campaigns based on client specifications.• Developed software to support project setup and report automation• System administration• Microsoft SQL Server administration

Master, Information Systems Management

Bachelor, Information Systems