Daniel Phan Email & Phone Number

Elkins Park, Pa, Us

Bensalem, Pennsylvania, United States

As the Network Security Solutions Architect Team Lead at PFFCU, I am responsible for orchestrating a team of engineers to manage the Credit Union's core network infrastructure. My role entails configuring, operating, and maintaining the security infrastructure to safeguard critical systems and member data. Additionally, I am involved in evaluating, testing, and implementing new security technologies, ensuring PFFCU's defensive posture remains robust in the ever-evolving threat landscape.Team Leadership: Overseeing a team of four engineers to manage the credit union's core network infrastructure and security solutions.Technology Implementation: Deploying Okta and RSA MFA for secure single sign-on, authentication, and mobile device management.Security Transition: Led the migration from WCCP Layer 3 to a WCCP Layer 2 design and implemented Integrated Windows Authentication to bolster user identity visibility.Infrastructure Enhancement: Deployed and managed security tools such as Cisco Secure Workload, SolarWinds Orion, and LogRhythm SIEM to fortify the network security posture and ensure comprehensive monitoring.

Bensalem, Pennsylvania, United States

I led comprehensive information security operations, overseeing a diverse team of analysts, administrators, and engineersTeam Leadership: Guided and mentored a team of information security professionals to promote skill development and goal achievement.Security Management: Managed security system projects and enforced regulatory compliance to mitigate security risks associated with technology initiatives.Incident Response: Led efforts in incident response management, including identification, resolution, and response to security threats and attacks.Proactive Threat Hunting: Conducted proactive threat hunting to anticipate and prevent security breaches before they could impact operations.Technical Expertise: Provided hands-on technical leadership in network perimeter security technologies and risk assessment methodologies, ensuring robust security measures.

Mount Laurel, New Jersey, United States

I am responsible for leading strategic initiatives in DDoS mitigation, network security, and cloud security. I design and implement large-scale DDoS solutions for service providers and have extensive experience in redefining detailed DDoS architecture and standards for Comcast.Spearheading Initiatives: Lead strategic initiatives in DDoS mitigation, network security, and cloud security, driving Comcast's technical direction in these areas.Large-Scale Solution Design: Designed and implemented large-scale DDoS solutions for service providers.Mobile Security Architect: Architected a 5G DDoS Mobile Security & vCMTS deployment to significantly enhance network security.Comprehensive DDoS Study: Studied the complete life cycle of DDoS attacks, from inception to resolution, greatly enhancing detection and mitigation strategies.

Moorestown, New Jersey

As a Senior Principal Security Engineer at Comcast, I played a pivotal role in the research, evaluation, and implementation of security products for both enterprise and commercial environments. I was responsible for creating the largest service provider DDoS solution and leading the implementation of cutting-edge BGP Flowspec deployment across diverse network environments, in addition to improving security measures for private and public cloud infrastructures.Some of my significant contributions include:Architecting Advanced Network Security: Successfully implementing a robust network security infrastructure during the construction of a new building, catering to the diverse needs of both technical and non-technical audiences within the IT security domain.Large-Scale DDoS Mitigation: Developing, deploying, and testing the largest service provider DDoS solution to safeguard enterprise and commercial infrastructures from IPv4/IPv6 attacks, as well as launching the 2nd Generation DDoS Mitigation service in collaboration with Comcast Business.Cutting-Edge BGP Flowspec Implementation: Leading the design and integration of the most advanced BGP Flowspec deployment, setting a new standard for ISP and MSO networks and ensuring comprehensive threat mitigation across diverse network environments, including Backbone Peering, Converged Regional Area Networks, National Data Centers, and Enterprise Networks.Research and Evaluation: Conducted extensive research and evaluation of security products, focusing on private/public cloud environments, and actively engaged in testing various technical proof of concepts, market trials, and performance evaluations to identify and deploy the most effective security technologies.

Moorestown, New Jersey

As Principal security engineer at Comcast, I was responsible for the development, implementation, and certification of next-generation security tools and technologies. By leading the launch of various security products and spearheading initiative such as DDoS scrubbing centers and Web Application Firewall, I played a crucial role in fortifying Comcast's cybersecurity infrastructure and ensuring the high standards of security across all networks.Strategic Development: Developed a roadmap for the next generation of security tools and technologies to be deployed across the Comcast enterprise network, laying the foundation for improved and advanced security protocols.Industry-First Product Launches: Spearheaded the commercialization and launch of the first security product with Comcast Business, the DDoS Mitigation Service, a significant milestone in the enhancement of Comcast’s security offerings. This introduced Comcast as a pioneering company in the cybersecurity domain.Deployment Expertise: Rolled out the first generation of Web Application Firewall across six national data centers, significantly bolstering defense against web-based attacks and vulnerabilities, and achieved at-scale network security standards.New Standard Certifications: Certified Firewall and Unified Threat Management (UTM) platforms as standard deployment across NDC and enterprise networks, replacing legacy platforms, thus, bringing significant efficiencies and unifying the security landscape.Internal Security Enhancement: Implemented SSL intercept solution to improve internal security posture in NDC and Enterprise networks, enabling comprehensive inspection of TLS/SSL traffic and ensuring secure data transmission.

I took the role as a Senior Security Engineer at Comcast, where I led the team responsible for Security Tools. I was immersed in the development, engineering, and operational management of security products and their corresponding support services across Comcast's vast infrastructure.Technology Deployment and Support: Jointly executed the deployment and operational management of the Websense Web Security Content Gateway (telco grade solution) for the entire Comcast network infrastructure, ensuring top-notch security against web-based threats.Agile Problem-Solving: Devotedly tackled critical issues like DDoS attacks and blackholing of traffic on the Comcast IP Network through a mixture of strategy, resourcefulness, and fast learning to minimize the impact of cyber-attacks and intrusionsEnterprise-wide Vulnerability Governance: Spearheaded the vulnerability management program, endorsing a targeted, risk-based approach to ascertain and manage risks across all Comcast-controlled systems, thus keeping the network security posture resilient against internal or external threats.Security Tooling Innovations: Authored multiple Proof of Concepts (POC) to advocate the viability and maturity of evolving security technologies that were critical to bolstering Comcast's defense mechanisms.

As a Network Security Administrator at Comcast, I assumed responsibility for the administration of network security for the Data Center and Enterprise network.IDS Solution Rollout: Implemented an intrusion detection system (IDS) across Data Centers in under the first six months on the job, enhancing the security posture of critical infrastructure.Digital Voice Market Security: Successfully deployed and managed an IDS solution for the Comcast Digital Voice markets, ensuring the security of these important business segments.Pre-Production Support: Provided dedicated security support to ensure the effectiveness and coherence of all pre-production and production security systems, contributing to the seamless overall security environment.

I led a multidisciplinary team of engineers in the design and evaluation of the next generation DOCSIS-based high-speed data network. The project was critical to the company's competitive positioning in the broadband market, and it led to several technology and process innovations that we were able to patent.Strategic Project Leadership: Led a multidisciplinary team of 12 engineers and scientists in the research, design, and evaluation of the next generation high-speed data network.Technology Research and Evaluation: Guided several concurrent efforts focused on the practical aspects of migrating from DOCSIS 1.0 to DOCSIS 2.0 and enhanced network provisioning, which significantly influenced the design of the new network.Process Optimization: Pioneered new design and evaluation processes that streamlined the overall efficiency of the project, resulting in its on-time and under-budget completion. Several of our new processes were later adopted company-wide.

Taunton, Ma

Master Of Science - Ms, Network Security

Bachelor Of Science - Bs, Telecommunication

Computer Information Systems

Bible/Biblical Studies

Divinity/Ministry