David Reith Email & Phone Number

Pittsburgh, Pa, Us

Pittsburgh, Pennsylvania, United States

Pittsburgh, Pa

A Specialist Master in the Risk and Financial Advisory practice, specializing in Operational Technology security. Performing cybersecurity assessments, C2M2 and NIST CSF maturity assessment, mitigation plans, policy development, and guidance to improve organizations cyber security posture.

Served as a case team member, case lead, trainer, and Cyber Incident Response capabilities assessor. Performed digital forensics, developed Cyber Incident Response policies, playbooks, mitigation strategies, and table-top training exercises.

Project Lead for security reviews and assessments in the Transportation, Manufacturing, Electric, Oil-Gas, and Building Automation/Management sectors, provided sales support and assisted with RFP responses. • Utilized technical expertise to analyze network traffic and identified misconfigurations and anomalies such as malware, the use of unauthorized protocols, and undesirable communications, that were previously unnoticed.• Analyzed configuration files (manual and automated) of computers, switches, routers, and firewalls and identified weaknesses or areas for improvement, including insecure rules/ACLs, weak passwords, and non-compliance.• Provided recommendations and strategies to improve network security architecture, including improved monitoring and alerting, system hardening, isolation and segmentation, and the use of jump hosts.• Contributed to Verizon’s Data Breach Digest.

Customer Sites

As the Technical lead for ICS/SCADA assessments and gap analysis developed procedures and step-by-step instructions for passive testing of ICS/SCADA environments. Provided security awareness training based on current and past events. Assisted with proposals for clients in response to an RFP. Ensured assessment and gap analysis of organizations’ policies and procedures met NRC 10 CFR 73.54 compliance as per NEI 08-09.

Assigned to Westinghouse, performed design assessments of the AP1000 Nuclear Power Plants and systems such as Digital Feed Water to ensure NRC 10 CFR 73.54 compliance and overall cybersecurity. Collaborated with Westinghouse to develop plans and procedures for assessments, design, and specifications for the Cyber Security Monitoring System (CSMS), improving overall security.

Led network design and cybersecurity initiatives for improving security and ensuring NERC CIP compliance of the SCADA network, including the redesign of the network, developing vulnerability assessment procedures and tests, and creating a test lab and network recovery plans. Developed policies and procedures for hardening of devices.

Planned, configured, and maintained communication networks (phone and data) for a tactical field environment to support different units and locations. Designed, installed, and maintained data networks in the field for Mission Ready Exercises (MRE), which were used for more realistic military training.

Installed, maintained, and provided day-to-day support of NetWare 4.x LANs, Windows NT LANs with Windows NT, 95/98 workstations. Configured and installed servers, workstations, printers, hardware, and Software as well as making recommendations for new hardware and software to purchase for upgrades of existing equipment and for new equipment. Tested and implemented new hardware and software configurations and applications.

Assigned to Mellon Bank, Installed, maintained, and provided day-to-day support of NetWare 4.x LANs, Windows NT LANs with Windows NT, 95/98 workstations. Configured and installed servers, workstations, printers, hardware, and Software as well as making recommendations for new hardware and software to purchase for upgrades of existing equipment and for new equipment. Tested and implemented new hardware and software configurations and applications.

Maintained, troubleshoot, and installed for a 5,000-user environment: Novell and NT LANs, servers, computers, printers, and software applications. I determined time, cost, value of repairing equipment. Made recommendations of when to upgrade and purchase new equipment, and what equipment to order, as well as recommendations and testing for software, application upgrades and purchases. I assisted in improving the purchase requisition process for computer equipment and software. I was the project lead for several projects such as the upgrade of the Medical Records department.

Graduate Certificate, Cyber Security Technology

Bachelors Degree, Information Technology

Associates Degree, Specialized Technology (Electronics)

Education record