Donny C. Email & Phone Number

* Set strategic vision for Cybersecurity program and execute roadmap to achieve the goals. * Restructured Cybersecurity department to account for increasing work demands and prepare Versant Health environment for acquisition. New structure created subject matter leaders who were empowered to solve problems within their subject matter space. Oversaw the orderly transition of work between outgoing CISO and incoming CISO. Oversaw multiple compliance certification and remediation efforts. * Act on behalf of CISO with delegated approval and rejection authority for strategic organizational projects. Present security strategy and plans before Executive Leadership Committee including CEO, COO, CFO and CCO. Oversee $4.4M cybersecurity budget.* Created risk-based insider threat program which integrated the Physical Security, Cybersecurity, Compliance, Privacy and Human Resource departments to provide an integrated and comprehensive security response.* Implemented “living compliance” model to assess organizational security policies and controls internally and with third party clients/vendors and inform risk and remediation decisions.* Directly managed a team of 15 cybersecurity professionals including SOC, Security Compliance, Security Engineering, IT Risk, Insider Threat, Identity Access Management, and Vulnerability Management teams.

11Th Combat Aviation Brigade

208Th Digital Liaison Detachment

Perform all duties as S-2 for a brigade-level asset. Successfully lead unit through warfighter exercise as ADVON OIC and S-2. Liaise with non-U.S. government entities (chiefly NATO/Romanian and RoK military command) and U.S. non-DoD organizations including U.S. State Department and Department of Homeland Security. Lead the development of Intelligence Preparation of the Battlefield and the Military Decision-Making Process. Preform critical mission analysis and conduct battle update briefs.

1St Military Intelligence Brigade

* Oversee Intelligence operations, including collection, planning requirements, processing, analysis and dissemination.* Support U.S. Army Modern Warfighter Objectives in the training and development of Army Intelligence Personnel both during and post TRADOC. Ensure training is in keeping with Army doctrine and best practices.* Provide expert and material support to training operations in CONUS and simulated OCONUS environments for the purposes of training or in support of U.S. National Security Objectives.* Lead field and garrison Intelligence units, develop leaders and soldiers within immediate unit, and achieve operation and strategic success for Brigade-level, sub-component and supported units.* Support Commander's objectives and intent. Ensure good order and discipline are exercised at all levels. Recommend Army Policy, awards, and reprimands with a mind to strategic and operational needs, supporting the commander's intent, instilling confidence in command, and supporting the welfare of the unit and soldiers.

349Th Tactical Psychological Operations Company

* Serve as an all-source Intelligence Analyst for the United States Army Reserves in a Psychological Operations Company. Possesses an understanding of the Military Decision-Making Process, and Joint and Army Doctrine, and the 7-step PSYOP process. Provide innovative and engaging intelligence and target vulnerability assessments and reach-back support. Exercise initiative, resourcefulness and experienced judgment in interpreting and applying existing guides as well as recommending new policy and methods to support fused, all-source intelligence production in support of PSYOP missions. * Lead and instruct others in the process of Target Audience Analysis and the development and maintenance of Target Audience Analysis Worksheets (TAAW), the requirements and proper development of Target Audiences, and best practices for integration.* Perform data mining and research, compile various intelligence reports, documents and threat advisory messages, and actively maintain awareness of world news events and potential impacts to USAR personnel or property in order to produce, coordinate, and disseminate finished intelligence products in those areas.* Conduct Tactical Site Exploitations and oversee the collection of information, including document exploitation, cellular phone exploitation, and other media exploitation. Catalogue information obtained, translate, mine and decipher documents for intelligence in keeping with Priority/Commander’s Critical Intelligence Requirements. * Provide highly motivated multi-discipline/all-source intelligence analysis to provide intelligence and forensic expertise as a member of a CONUS Operations Integration Center. Develop and integrate enhanced Intelligence, Surveillance, and Reconnaissance assets. Provide intelligence targeting support products and “reach-back” support to forward-deployed elements as required.

305Th Military Intelligence Battalion

* Research complex historical, geopolitical, economic, religious, cultural, and technical issues using all-source techniques (Open Source, Human Intelligence, Geospatial Intelligence, and Signals Intelligence), identify pertinent information, analyze gathered data and communicate findings and suggestions to senior leadership and tactical units at Top Secret through Unclassified levels. Perform research, analysis, evaluation, coordination, and liaison duties against an assigned target set. Research and analyze threats, and conduct intelligence reporting, either directed at or in proximity to, military and civil operations worldwide.* Perform threat assessment and modeling based on worst-case most-likely attack scenarios using historical trend analysis. Apply extensive knowledge of intelligence, threat analysis, and forecasting methodologies to analyze intelligence information, assess developments, trends, and threat implications within critical geographical and functional areas. * Explain complex subjects and principles to large civilian and military audiences, who may be without prior expertise in the subject matter, at a level which they can understand. Present ad hoc briefings and speeches on current events, project status, for motivational purposes, and for correctional purposes.* Mentor subordinates in the use of military computer software (ArcMap/ArcGIS, MFWS, DCGS-A, Palantir, and CPOF).* Write and document in depth papers detailing complex issues in an understandable manner for both planning and policy decisions. Write and coordinate the development of tailored intelligence and information products.* Oversee targeting operations to identify highest priority objectives and coordinate targeting with the next shift’s commander, to ensure unity of effort and continuity of operations in accordance with strategic objectives.

2Nd Batallion 13Th Infantry Regiment

* Oversee platoon-sized elements in garrison environment, and ensure personnel and equipment accountability and readiness by conducting checks and inspections. Lead team-sized tactical combat patrols and reconnaissance operations as part of larger mission parameters.* Facilitate in conflict resolution by communicating and translating across cultural boundaries, utilizing active listening and facilitating techniques to guide individuals towards a solution and understanding.* Develop, maintain, and deploy personnel rosters and shift schedules to ensure adequate force protection in garrison and in the field. Inform soldiers of their schedules and duties, listen to and consider feedback. Coordinate schedule rotations, required duties, threat conditions, standing orders and special instructions, and time available with other platoon leaders to ensure mission parameters are met.* Employ positive communication techniques to encourage and inspire subordinate and peer soldiers to push their capabilities and achieve personal and organizational objectives, provide counseling and support, empower soldiers to solve problems creatively and independently.* Ensure maintenance of discipline by immediately and appropriately addressing violations of and infraction against good conduct. Ensure proper military doctrine is followed regarding the maintenance and handling of equipment and weapons, anti-discrimination, sexual harassment prevention, suicide prevention, theft prevention, and adherence to standing orders. Determine seriousness of violations, personally ensure violations are corrected, and report potentially serious, willful or repeated conduct violations.

Saudi Arabia

* Oversee strategic operations, business development, and corporate direction.* Negotiate cyber-security consulting contracts with enterprise organizations, including project scoping, manpower, and security assets required.* Integrate cyber-security and physical-security solutions seamlessly to facilitate client's strategic objectives and maintain industry best-practices in a cohesive security environment.* Operate in diverse multi-ethnic and multi-lingual environments to assist client business in meeting their overall security objectives with minimal disruption to business operations. Manage international relations and build trust and value across cultural and national boundaries. * Advise and present security assessment presentations in a manner that builds value for key stakeholders and instills confidence in security operations and solutions.* Lead incident response plan development and advise on ongoing incident response operations, common pitfalls, and best practices. Assist in developing solutions for divers client bases in post-incident phases.

Greater Denver Area

* Develop Cyber Security Operations Center, including scoping inputs, developing processes, and ensuring delivery of outputs while continually improving. Oversee department personnel operations including hiring and firing. Develop and negotiate Statements of Work, Master Service Agreements and Standard Operating Procedures. Direct the development of a Knowledge Base, SOAR platform and Ticketing system based on client and internal needs, including workflows and processes. Travel to client sites to conduct onboarding. Lead and conduct Incident Response and Forensic Analysis. Set strategic development priorities and manage associated budgets and personnel allocations. Conduct weekly meetings and shift training for personnel. Develop, implement, and enforce corporate security policies.* Grew department revenue from $500k to over $3M annually, and staff from 4 full time analysts to 15 personnel including senior analysts, vulnerability analysts, threat-hunters, additional team leads, engineers and Identity Access Management (IAM) specialists. Developed Vulnerability Management, Security Platform Assessment, and an IAM service offerings. Instituted a 360-degree feedback program; developed and implemented a standardized quarterly review system with ongoing feedback and SMART development objectives for staff.

Colorado Springs, Colorado Area

* Cleared Vulnerability Management operations on U.S. Air Force and DoD networks (DODIN Operations). Vulnerability management in support of entire airforce with over 900,000 systems:* Key member of a 10 man team in the Identification and remediation of vulnerabilities across worldwide United States Air Force Network * Create and deploy applications and patches to 900K+ devices through SCCM current branch 1802* Maintain and support 473 Windows Server 2012 devices that are responsible for multiple functional roles within the SCCM environment to include 1 CAS, 8 primaries and 388 secondary’s.

Denver Technology Center

Conduct Public Key Infrastructure (PKI) security requirements development, design development and process analysis. Work with diverse customer base to establish common operating picture and remediate PKI architecture to account for expiring and weak certificates. Develop organization Certificate Hygiene Policy in line with industry best practices.

Douglas County, Colorado

* Plan and design enterprise security architecture.* Create enterprise security documents (Policies, standards, baselines, guidelines and procedures).* Planning and design of an enterprise Business Continuity Plan and Disaster Recovery Plan, and Incident Response Plan. Establish information flow with Emergency Management Office and assist in development of Emergency Response Plans for cyber-security incidents.* Keep current with emerging security alerts and issues. Conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts. Including Darnket/Clearnet sources and via Grey Material. * Recommend, schedule and perform security improvements and upgrades Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security* Perform the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operation procedures generically and the enterprises security documents specifically.* Work with the IT operations team to maintain up-to-date baselines for the secure configuration and operations of all in-place & mobile device.* Maintain operational configurations of all-in-place security solutions as per the established baselines* Monitor all-in-place security solutions for efficient and appropriate operations. Investigate problematic activity. Audit and investigate employee usage of systems. Assist law-enforcement with criminal investigations as a Subject Matter Expert.* Design and execute vulnerability assessments, physical and cyber-security penetration test and security audits.* Manage vendor relations and plan for future projects, including budgeting and Requests For Proposal. Conduct formal training sessions for IT department. Provide C-level briefings on current cyber-security trends, risks, and solutions.

Greenwood Village, Co

* Act as the subject matter expert regarding Security Incident and Event Management technology for all teams and analysts throughout the Cyber Security Operations Center. Preform 24/7 risk assessments, and needs/gap assessments to ensure unparalleled excellence and anticipation of advanced cyber threats, and provide in depth technical assessments in "Plain English" which could be communicated readily to clients by our teams. Served as Tier-2 support to clients during incident response and investigations related to malware, internal escalation of privileges, and exploits, brute force attacks, and other various cyber-attack/exploit investigations. * Perform work unsupervised with great latitude and flexibility in operational planning and scheduling. With no outside direction, pursue potential system security and operational threats and problems, conduct research and analyze threats, and recommended feasible solutions.* Solve problems in a limited time and with limited information. Rapidly assess immediate cyber security threats, recommend courses of action for both near and long-term in high-stress situations to restore system integrity, minimize system disruptions and restore full operation.* Pursue self-directed educational opportunities in order to obtain advanced working knowledge, and leverage outside knowledge to obtain better results. Create and update knowledge-based articles of previously encountered problems to the purpose of minimizing future response times.

Greenwood Village, Co

* Conduct deep dives into Security Information and Event Management incidents and logs and make informed and actionable recommendations. Decipher log data based on contextual system architecture unique to clients and create workable solutions to client problems. * Deploy, troubleshoot and develop rules for Security Information and Event Management (SIEM) systems (AlienVault Open Source Security Information/Event Manager (OSSIM), IBM QRadar, McAfee Enterprise Security Manager (ESM), and LogRhythm). Assist with rollout of tiered rule implementation. Develop use cases. Conduct in-depth reporting and keep others informed of developments. Mentor peers in the use of LogRhythm “Console” and conducting investigations into incidents. Possess a proficient working knowledge of all network and information security basics, including Firewalls, IDS, IPS, and Gateways. * Develop and deploy live and virtual lab environments across multiple OS including multiple flavors of Linux, Mac and Windows. Deploy Active Directory and SQL servers in a testing environment. * Conduct penetration testing against realistic lab environments including DNS poisoning, brute force attacks, man-in-the-middle attacks, and other forms of exploitation for the purpose of better understanding systems and vulnerabilities, improving system deficiencies, and tuning systems and processes to better detect nefarious activity.

Greenwood Village, Co

* Monitor Security Information and Event Management (SIEM) applications (McAfee, Blue Coat, LogRhythm, and ForcePoint) for security and operations incidents. Assist in conducting daily system health checks, triaging incidents, conducting forensic incident examination, and troubleshooting on multi-platform systems (Linux, Windows, and Apple).* Triage Data Loss Prevention incidents occurring in Data In Motion, Data In Use and Data At Rest on a daily basis, correctly classifying all data based on agreed-upon rules with customer resources and previously acquired knowledge. Record triage steps on a policy-by-policy basis for each individual customer policy, keeping current major rules describing how data should be classified for cross-resource consistency and duplication purposes. * Travel to client sites as an InteliSecure representative, and as part of a team for customer service, reporting and security incident management reasons. Conduct face-to-face meeting with clients in order to report on program progress and roadblocks, and for the purpose of developing positive working relationships with client teams. Provide reports to client Chief Information Security Officers, answer questions, develop program road-maps and additional requirements.* Act as on-call point of contact for security incidents occurring after hours. Act independently to provide immediate notification of security incidents to clients and provide first-line event triage to determine need for additional resources and emergency notification.* Lead by example by maintaining a high standard of compliance with all ISO 27001 security controls, policies and procedures, and ensure proper remediation of infractions.* Work within a secure area and ensure the physical integrity of work environment, and system and data integrity and confidentiality are maintained. Safeguard client information, and prevent cross-contamination of client information in a fast-paced detail-oriented environment.

Fema Revion Viii

* Collaborate with state, federal and military entities (CIAC, CBI, DCE) on Threat/Hazard Identification & Risk Assessment (THIRA) worst-case most-probable scenarios.* Analyze previous year’s THIRA feedback from FEMA HQ and use feedback to ensure best-practices are met in creating current year’s THIRA.* Plan, create, setup, and evaluate template for Regional Interagency Steering Committee webinars, and update and maintain contact lists for RISC events.* Create and analyze surveys submitted by RISC attendees.* Evaluate RISC site, and coordinate with local law enforcement (Auraria Campus police), RISC event setup and security.* Provided technical advice regarding national preparedness efforts and made recommendations for program improvements based on lessons learned, 360-degree feedback, and known/researched best practices.* Collected and analyzed disaster operations data regarding innovative practices, areas for improvement, and potential root causes of recurring issues. Facilitated after-action reviews and synthesized disaster information into recommendations to address areas for improvements. Supported corrective action development and monitored the implementation to evaluate progress in improving operational outcomes. Performed and presented quantitative and qualitative analyses of disaster issues to support incident management and incident support decision making. Identified and tracked resolution of gaps and conflicts in planning requirements and assistance programs.

Greater Denver Area

* Protect the nation’s transportation systems.* Train others in the recognition of Improvised Explosive Devices.* Train others in the recognition of suspicious behavior and fraudulent documents.* Administer broad-scope high-quality customer service to the public.* Facilitate conflict management and resolution with transportation stakeholders.* Coordinate with multiple stakeholders in the transportation industry.* Safeguard Sensitive Security Information.* Plan, lead and participate in Playbook operations.* Conduct authorized physical penetration testing, requiring creative dynamic and often unscripted exploitation of vulnerabilities in order to find, assess and mitigate vulnerabilities.

Lakewood, Colorado

* Provided knowledgeable and courteous customer service to a diverse range of customers with individual needs, and ensured the customers’ needs were met in a timely manner which made them feel valued.* Boosted overall sales and individual ticket values while remaining respectful to customer needs.* Maintained meticulous cash balances, and ensure registers had adequate supply of cash, and that excess cash was collected and deposited.* Conducted inventory, identified stock deficiencies, and notified management and stakeholders of stock shortages to ensure stocks were replenished.* Detected and defeated theft and fraud by customers and employees while maintaining a high level of courteousness and respect.

Greater San Diego Area

* Developed a viable contact list from a database of leads and built rapport with various potential customers using cold-call techniques and emotionally-based sales appeals.* Engaged potential buyers in structured and free-form conversation in order to understand customer needs and fit a product to those needs.* Educated potential buyers on features and benefits of products and made recommendations on how/what products could improve their lives or operations.* Analyzed target audiences for similarities in needs, and crafted messages for optimal effectiveness. * Influenced, motivated, or persuaded contacts to accept opinions and take actions relative to the advancing their interest in purchasing products and programs, commitment of major resources, and resolving complex problems or issues pertaining to aviation training needs. Typically, contacts were sufficiently fearful, skeptical or uncooperative that highly developed communication, negotiation, conflict resolution, leadership, and similar skills was required to obtain the desired results.

Greater San Diego Area

* Employed knowledge of computer requirements and techniques required in carrying out project assignments consisting of several related tasks, such as development of significant modifications to a system on the basis of detailed specifications provided. Analyzed the interrelationships of pertinent components of systems; planned the sequence of actions necessary to accomplish assignments; and personal took responsibility for certain segments of overall projects. Tasks required knowledge of the customary approaches, techniques, and requirements appropriate to multiple computer application areas and computer specialty areas; planning the sequence of actions necessary to accomplish the assignment where this entailed coordination with others outside the organizational unit and development of project controls; and adaptation of guidelines or precedents to the needs of the assignment. Additionally, projects occasionally required computing significant revisions in the logic or techniques used in the original project development.* Provided expert technical advice and guidance to senior leadership, including company CEO, on appropriate application of technology to meet current and future mission requirements; advised on maturity and viability of emerging IT solutions to include recommendations; development and implementation of IT capabilities and policy; performed oversight roles within the planning implementing, monitoring, and assessing programs; applied project management techniques and analytical processes to the planning, design, and implementation of new and improved systems; and reviewed application of IT solutions including technological cost estimates.

Bachelor’S Degree, Critical Intelligence Systems, 3.73 Gpa

Activities and Societies: Emergency Services Club, Aviation Club.Provost's List member.

Associate'S Of General Studies, Emergency Management & Planning, 3.63 Gpa

Activities and Societies: Martial Arts ClubEmergency Management & Preparedness, with focus on EMS.