Derek Held Email & Phone Number

Kirkland, Wa, Us

Costa Mesa, Ca, Us

Destroyer of secret keys. Integrator of tools, people, and knowledge. Leader of large security engineering projects. That guy who knows stuff about Google Cloud and AWS security. Helping teams secure applications by taking advantage of all the security features of cloud platforms and Kubernetes.

Costa Mesa, Ca, Us

Building security directly into development pipelines with security policy as code so that no team has to wonder if they did everything they could to keep their app, infrastructure, and data secure.

Seattle, Wa, Us

* Worked directly with senior executives to completely transform information security program, including allocation of budget to secure critical new tools and capabilities.* Team lead for corporate IT infrastructure, managing work using agile processes. Hands-on budget planning with department leadership to plan OPEX and CAPEX expenditures.* Drive collaboration across all Zonar teams in efforts to improve security for the organization and customers. Rolled out major IAM initiatives like single sign on, multi-factor authentication, breached password protection (in product and corporate), and others.* Regularly improve hardening of endpoints and servers through group policies or other policy automation tools* Perform consultation for product teams on implementation of DevSecOps practices, particularly in automating of security policies and standards.* Conduct security architecture reviews with product teams to help them design secure products that operate on Google Cloud Platform and remain engaged throughout development.* Develop security policies, standards, and processes based on NIST 800-53 and other frameworks.* Conduct security incident response and write incident reports with organizational recommendations.* Provide education and training on security concepts and application.

Seattle, Wa, Us

* Write and maintain information security policy documents used across Zonar.* Conduct internal security training to achieve improved awareness and benefit company operations.* Security administration of Google Cloud and Office 365* Advise infrastructure and development teams on application of security patterns* Conduct security incident response* Act as security consultant to teams across the organization and speak to security architecture, concerns, processes, or other needed input.* Propose, promote, manage, and conduct projects to improve the overall security posture of the organization.* Represent Zonar in NMFTA working groups focused on the topic of security.* Serve as Data Protection Officer and ensure compliance with GDPR.

Seattle, Washington, Us

* Manage projects across the full lifecycle, from proposal through completion.* Maintain IT code and configuration using git for version control.* Perform security incident response duties as required.* Manage all aspects of email infrastructure. Including SPF, DKIM, DMARC, incoming email policies, and Exchange server.* Architected and implemented new website infrastructure in AWS using Route 53, CloudFront, Lambda, and S3. Automated publishing process via PHP-based WordPress plugin, Bash, and AWS CLI tooling.* Write scripts in Powershell and Bash as needed to automate tasks.* Administrate Ubuntu Linux servers running a variety of open source software such as Nginx, Apache, GitLab, Request Tracker, and MariaDB.* Network administration of all Juniper EX switch gear, SRX firewalls, and IPSec VPNs in a multi-site, international infrastructure.* Manage enterprise Microsoft software including Windows Server 2016, Active Directory, SharePoint, and IIS. Leverage Server Core to reduce IT footprint and reduce attack surface area.* Creating and maintaining team documentation to keep information correct and up to date.* Manage Ubiquiti UniFi wireless networks across multiple locations.

* Implemented Ansible to manage Slackware Linux environment and developed playbooks as part of infrastructure as code initiative.* Migrated from Windows Server 2003 to Linux and Server 2008 R2 as part of infrastructure refresh project. * Deployed and configured Fortinet border firewalls.* Perform network and server administration in a multi-site infrastructure connected with OpenVPN.* Deployed Alert Logic to provide audit log collection across the entire environment.* Automated production code deployments for multiple services using PowerShell.* Deployed new patching solution that migrated environment from WSUS to ControlNow.* Created images and task sequences for MDT to automate server and workstation OS deployment.

Pullman/Spokane/Tri-Cities/Vancouver/Everett/Global, Washington, Us

* Developed streamlined Sharepoint solution for equipment management.* Installed and maintained Checkpoint firewall to provide network separation for sever infrastructure.* Maintained printers, projectors, lab equipment, and other IT hardware.* Managed MDT images and task sequences to deploy different Windows 8 builds depending on need.* Configured Crestron hardware to provide lecture hall controls automation.

Pullman/Spokane/Tri-Cities/Vancouver/Everett/Global, Washington, Us

* Rebuilt security logging infrastructure from the ground up using Syslong-NG to provide a massively simplified solution with greatly increased capacity.* Created forensic "go disks" that automated the collection of forensic data during the incident response process.* Developed new policies for audit log collection based around NIST 800-53.* Perform incident response duties for a variety of security incidents.* Monitor QRadar SIEM tool for security alerts, configured alerting, and tuned for false positives.

Pullman/Spokane/Tri-Cities/Vancouver/Everett/Global, Washington, Us

* Wrote plugin for WordPress in PHP and Javascript to provide widget features.* Developed a Python tool to automate migrating static HTML sites into WordPress.

Pullman/Spokane/Tri-Cities/Vancouver/Everett/Global, Washington, Us

* Rebuilt NAC rules in Cisco Clean Access from the ground up to provide a better user experience.* Conducted first line incident response.

Pullman/Spokane/Tri-Cities/Vancouver/Everett/Global, Washington, Us

Assisted all kinds of users with a variety of technical needs.

* Perform asset normalization* Design UI and workflow for Remedy based project management module.* Test software against design specifications and document feedback for development team.

Master Of Engineering And Technology Management

Bachelor Of Arts In Business Administration, Management Information Systems