David Glosser Email & Phone Number

Tarrytown, New York, Us

Manage a threat and vulnerability management program in a global multi-technology environmentServe as service delivery manager for vulnerability management on applications, systems, and network infrastructureDiscover, analyze, prioritize vulnerabilities and risks to networks, operating systems, applications, databases, and other information system components. Engage with stakeholders to facilitate vulnerability discovery, understanding of risk, remediation, and tracking.Perform policy compliance scanning to analyze configurations, compare to established baselines, recommend remedial actions where necessary. Communicate security and compliance issues in an effective and appropriate mannerManage outsourced penetration testing and vulnerability assessments and third-party audits. Collaborate with other members of IT and business units to interpret any vulnerabilities, help define mitigating controls and design plans for remediation, or alternatively assist with the exception process.

Tarrytown, New York, Us

Develop standards, procedures, and guidelines around cloud security requirements. Design, manage, and implement strategies to deploy assets into a secure cloud environment. Architect the choice of security technologies and tools necessary to ensure a highly secure yet usable computing environment. Responsible for the successful deployment and management of solutions in support for information security in a multi-platform (Linux, Windows, application, SaaS, PaaS. IaaS) environment. Document current state, perform threat modeling, vulnerability assessments, and gap analysis, create Risk Registers, and create target state for corporate cloud and on-prem environment.Reduce risk and cost by ensuring security is integral to strategic IT and business decisions and client projects. Actively communicate with stakeholders to drive awareness and understanding of security architecture roadmaps and directions. Architect AWS, IAM, and Active Directory infrastructure to provide for security, confidentiality, manageability and scalability. Implement and enforce IAM, Active Directory and cloud security best practices,

Tarrytown, New York, Us

Manage a threat and vulnerability management program to include ongoing penetration testing, vulnerability assessment, data loss prevention, and threat assessments; assist with the remediation and validation of mitigation strategies. Author enterprise information security standards, software and hardware hardening guides in order to protect Intellectual Property from internal and external threats. Aid the business insure confidentiality, integrity, availability, authenticity, and non-repudiation of critical information system resources and related activities, including but not limited to, data/information, application software, servers and desktop hardware, physical assets, network and telecommunications, and services.Collaborate with other members of IT and business units to interpret any vulnerabilities and help define mitigating controls and design plans for remediation, or alternatively assist with the exception process. Correlate security data from SIEMs, security intelligence services, scanners, policy management tools, CMDB, and patch management systemsMonitor and analyze security logs from proxy, antivirus, firewall and system event logs for threats and risksEnsure timely responses to security incidents using incident response best practices and methodologies.

Yonkers, Ny, Us

Solely responsible for the development of ongoing maintenance of information security policies, practices, procedures, standards and guidelines.Manage the overall Information Security strategy for the company, thereby protecting the confidentiality, integrity, and availability of the company’s information assets and services.Manage the implementation of and adherence to security policies, standards, and procedures to ensure ongoing maintenance of the information security program.Identify protection goals, objectives and metrics consistent with corporate strategic plan and work with leadership to prioritize security initiatives and spending based on appropriate risk management methodology.Maintain security operations and standards sufficient to ensure compliance with all relevant security regulations, including but not limited to PCI-DSS, , federal and/or state laws, etc…Serve as an internal information security SME to the organization and champion the integration of security practices into all areas of IT administration, operations, support, and development.Oversee end ensure the day-to-day security operations capabilities and functions across the enterprise.Perform information security risk assessments and serve as an internal auditor for security issues, with overall responsibility of the company’s risk register and remediation efforts.Work with outside consultants as appropriate for independent security audits. Oversight of internal & external penetration testing, along with required remediation.

New York, Ny, Us

Responsible for the implementation and on-going operation, maintenance and management for the Firewalls, IPS/IDS and Enterprise Infrastructure. Develop strategic and tactical plans for Business Continuity and Disaster Recovery; Perform system audits and penetration tests to ensure adequate security of the MTA infrastructure

Ma, Experimental Psychology

Education record