David O. Email & Phone Number

Salt Lake City, Ut, Us

Holmdel, New Jersey, Us

Chicago , Il, Us

Head of Advisory & Professional services for Abira Security.

Eden Prairie, Minnesota, Us

Independent Cyber Security Professional

Cheseaux, Ch

Advisory Services Leadership team with cross-functional responsibilities. - Virtual chief information security officer ('vCISO') - CISO advisor around strategic offerings - Pre-sales leader by establishing the baseline and expectations for customer engagement for advisory services. - The Advisory Services channel manager for vendors and technologies - Incident Response commander for incidents involving, data privacy, privacy law, Expert Witness, security engineering (for custom-built applications) - in the cloud or on-prem, and multiple cloud environments.

Cheseaux, Ch

• Worked directly with clients and sales, to identify, scope, & create opportunities to engage with the customers. • Led the P&L for multiple lines of advisory services (Cybersecurity Incident Response and Penetration Testing Services), generating millions in booked revenue for the practice (over 1.5 years). • Worked with the sales team to identify over 11+ million in proposals with an average win rate of 60%. Generated over several million unique leads generated in six months timeframe. • Multiple years of Leadership / Management experience with leading a team of Penetration Testors and Incident Response / Forensics Experts. • Acted as CISO advisor, vCISO, Business Development, Practice Lead across the Kudelski Security lines of business. • Owned P&L for 2/3 of the lines of business within Advisory Services as the primary contributor to business growth of over 40% from 2018-2019• Business Development – Grew Pipeline to over million (double digits) through strategic discussions with CISOs and cybersecurity program owners • Established new offerings and go-to-market strategies to best suit the customer’s evolving risk requirements. • Assisted clients with building solutions around data privacy around Cyber-Security best practices.• Established, negotiated, and managed the Advisory Services channel of program, vendor, & partner relationships.

Cheseaux, Ch

Responsible for building the Cyber Resilience Suite of Services at Kudelski Security including our marketing strategy/materials, vendor/partner relationships, methodology, deliverables, and quality of service. With a focus on delivering strategic guidance to CISO increasing their security posture, capabilities, and understanding vs. their market. - Helping clients (Across Industry) create a defense security model around Incident Response - Engage Board of Directors / Executive C-Suite Teams / SOC / Business Leaders in comprehensive Table Top Scenario exercises - Responsible to PnL of Incident Response and Cyber Resilience Pillar of Kudelski Securities Advisory Services Group - Provide innovation around services to distinguish and differentiate Kudelski within the IR market.

I Assessed and Developed the security program in support of the business goals and operating model aligned to the parent companies’ requirements and governance. Co-Owner of a small business aimed at providing families ongoing opportunities for safe family-centered activities.• Worked with the business and parent company to identify a risk-based self-assessment for measuring cybersecurity risks. • Developed policies and procedures to align the business objectives and security best practices to provide risk management and governance for the organization.

Teaneck, New Jersey, Us

Led the Strategic Direction for the Cybersecurity Program of the US division.• Leadership of the organization’s cyber strategy (cyber-security) around people, processes, and technologies. • Aligned overall security program road map to the unique business objectives, improving the maturity of current & future state to industry averages.• Management over the incident response and forensics SOC teams.

Gb

Deputy Director – Global Cybersecurity (Cyber-security) Operations: Developed a first-of-its-kind global cybersecurity program built on cyber threat intelligence, incident response, forensics, insider threat, DevSecOps, and cross security program. Managed the technical capability build-out of the Forensics, Threat Intel, CSOC, Hunting and Engineering teams, and the supporting global business process to ensure the successful integration and success of the program. • Drove the measured improvement of PwC’s global security posture/maturity, which efforts enabled new capabilities that shifted their operating model from reactive to preventative and proactive.• Partnered with the business to support joint business relationships for mature go to market solutions for clients, providing SME services to the advisory group for security, workflow, engineering, security operations, and product features.• Standardized the firm’s security technology deployment, realizeing 25% faster identification of malicious attacks by expanded computing infrastructure, consolidation of technologies, and a security team focused on security technology gap analysis. • Improved the firm's credibility by guaranteeing bullet-proof data protection through world-class cyber monitoring and response capabilities. Efforts also include the improvement of the external brand, visibility, and perceived posture based on third party risk management vendor reports.

Overland Park, Ks, Us

Demonstrated ability to manage & deliver complex client-facing expectations while building lasting relationships with customers winning new business. • Snr. Sec consultant for IR program overall pro-active IR engagements (Gap analysis, Table Tops, and Policy dev) • Creating go-to-market solutions delivering products that meet client expectations and demands. • Managing forensic teams' major breach investigations while driving business demands, engagement timelines, and while providing actionable intelligence.• IR policies and procedures development and creation designed to meet client needs and expectations • IR policy alignment to disaster recovery (“DR”) and business continuity plan (“BCP”)• Senior security consultant on forensics investigations delivering reports on attack vector, possible data exfiltration activities, possible internal hacking, malware analysis/remediation, lateral movement, observed gaps, and recommendations for mitigation gaps. • Established incident response procedures based on requirements for Data Privacy standards. • Pro-active engagements included facilitating simulated IT security incident "Table Top Exercise" with customized attacks scenarios and vectors for each organization's infrastructure designed to gauge IR capabilities within vulnerability management, IR policies, BCP and DR plans, roles, and responsibilities and communication capabilities ranking overall security posture. • Simulated breach scenarios in Cloud Computing for business-impacting systems. • IR assessments providing actionable analysis including gaps, maturity, and recommendations for improving their IR security. • Utilizing scripting skills to create on-demand solutions for clients engagement producing agile data processing and correlation • Assist with creating the statement of works and setting stakeholder expectations for engagements • Protect client interest and confidential data while meeting deliverables standards

Overland Park, Ks, Us

Primary Incident Management / Response - Pro-Active Engagements My job affords me the ability to perform a wide variety of skill sets to an ever-growing audience. The focus of my skills have been on the Incident Response Readiness Assessments, Incident Response / Incident Management Plan and Playbook creation/development, and Security Incident Simulation through Interactive Table Top exercises. The Incident Response Readiness Assessments help organizations understand their security posture for responding to the potential threats of hackers, bots, hacktivists, and APT threats. Through this process I make organizational-wide recommendations around technologies, policies, and procedures that help improved and re-mediated an organization's overall IR security posture. As part of the holistic approach, I will review and analyze the existing policies and procedures looking for gaps around Incident Response. Identification of gaps is only the first step to mitigating the overall risk, the next step is to create and develop a specific IR plan and Playbook for the organization that supports the IR development efforts. The Security Incident Simulation through Interactive "Table Tops" is where the rubber hits to the road. These Table Tops allow an organization to get a highly crafted APT attack simulation targeting their critical business processes. Then I observe the actions of the organization and individuals to craft a proposal that outlines strengths and opportunities for development.

Jersey City, Nj, Us

- Document projects with SME level expertise for (admin guides, security baselines, user guides, helpdesk guides, etc...) on 20 diverse APT security related projects.- Support projects with SME skills for successful knowledge transfer to clients.- Engage possible clients in fact finding and risk analysis.- Create document standards for department wide adoption.- Assist with research for Proof of Concepts and Statements of Work- Work with PPM to protect clients interested in the project.

Analysis of current school resources to resolve escalated issues with communication, hardware, and software infrastructure and implementation.- Create a strategic plan to correct issues from analysis and create long term goals for success- Documents all aspects of site procedures to hand school off to Jr. Tech- VBS scripting programming to solve district-wide problems- Automate processes through building robust VBS scripts for district use.- Respond to Help Desk Tickets within professional limits while maintaining professionalism at all times- Using extensively Active Directory Analyst, User right assignments

Ms - Information Security And Assurance, It

Computer Animation, Fine Arts