Don Mcbride Email & Phone Number

Naperville, Il, Us

Murray Hill, Nj, Us

Research weaknesses in 4G, 5G security. Provide solutions that enable customers to operate networks at a level of security they can tolerate. Look at 6G and propose secure solutions to operate in next generation networks. Specialties Product Development, Control Protocols, Vulnerability Management, Product Security Assessments

Espoo, Southern Finland, Fi

Addressing product security proactively. Governance. Responsible for IP and Optical Network business division’s product compliance to Nokia product lifecycle development security design criteria: Threat Anal, Architecture, Requirements, Privacy, Coding, Hardening, Testing. Tracking to Nokia remediation metrics associated with vulnerability management. 3rd party and Nokia code. Generate monthly reports for division’s 88 products. Manage product security lead’s compliance assessment and remediation progress. Approve compliance for lifecycle gates, or veto. Support duties include ensuring development and leads are properly qualified and trained, clarifying ambiguous criteria and requirements aligned with quality and standards, tools support, provide comprehensive view of product security posture.

Espoo, Southern Finland, Fi

Product (virtualized and dedicated) Security Analysis: • Vulnerability and Penetration Test and Analysis• Software Development Environment Audit• Vulnerability Assessment Tools • 3rd Party Software Vulnerability Analysis.Create viable AICPA SOC2 security controls for ALU product security implementation and 3rd party assessment. Conduct independent security audit of ALU products to fulfill customer contractual obligations per solution release.- vulnerability and penetration product audit: discovery(nmap, Senmap, Sparta), vulnerability scanning(Nessus, Nexpose, SAINT), configuration benchmarking (CIS tool, Nessus), DoS (Custom & Defensics), fuzzing (Defensics, Protos), web application (Appscan, Burp), penetration (Metasploit), analysis and reporting- Product testing incl. application, platform middle-ware, Cloud (OpenStack, VMWare, CloudBand), Base HW.- Software development environment security audit, aka trusted software delivery, free of malicious code, Incl. assembing/presenting internal evidence related to the physical, OS, and software construction and delivery environment to contracted oversight.- security issue tracking, incl. remediation planningAuthor internal security standards and best practices for SDLC compliance (threat analysis, security capabilities analysis, vulnerability and penetration testing, 3rd party software analysis, remediation planning)Develop Security Analytics Tools: Analytics Dashboard of security assessment data (Splunk).NSA/CFIUS product assessments, security SMELab network configuration:network and host configuration incl.dedicated and virtual Kali Linux and MS Windows platforms, vlans, router config, host configExpedited Security Incident Response.

Espoo, Southern Finland, Fi

Lead and organize panel of relevant subject matter experts in 3 day lock-in review of internal project (product, solution, or service). Process determines project strengths and major obstacles to set project on path for success. Responsible for preparing project team for review, obtaining subject matter experts, setting review agenda, setting success criteria by which to assess project. Review meeting includes coordinating logistics, maintaining task direction, balancing and summarizing discussions, assuring all strengths and issues are recorded, determining when additional management intervention is needed, assessing schedule and adapting agenda, leading review team caucus and management readout at conclusion of review. After, author project’s “Review Report”, board presentation, and issue follow-up if necessary.

Espoo, Southern Finland, Fi

Author of “Specification for EAP Authentication Methods” including EAP-TLS, EAP-TTLS, EAP-SIM, EAP-AKA, as well as authentication using CHAP and MS-CHAPv2. Specification includes re-authentication, error handling, impacts of new versions and software upgrades. Includes specifying requirements of key derivation and management, X.509 certificate-based authentication, PKI, DHCP security, Mobile IP, AAA, and mobility impacts - compliant with WiMAX standards and relevant RFCs. Also provided requirements for IPSec, SSH, and SNMP.

Author Lucent Common Security Requirements applicable to all products. 375 detailed requirements applicable to all Lucent Wireless network elements. Conforms to IETF and ITU-T X.805 Security Architecture, 8 dimensions in management plane/infrastructure layer. Aligned with Cingular, Verizon, Sprint/Nextel, O2 requirements along with security ITU, ANSI, Telcordia standards, as well as security test input and field feedback. Achieve acceptance by representatives of all Lucent 2G and 3G wirelesss technologies and platforms {EVDO, CDMA, UMTS, and IMS}. Lead author for product realization specification Systems Requirements for 9900 Wireless Network Guardian (Wireless Access IPS), an expedited project. Lead author CDMA Threat Analysis, assessment of security protection and vulnerabilities of CDMA product portfolio. Author systems and architecture feature specification for CDMA security features including IPSec, Session Timeout, SSH and Centralized Security Management.

VoIP Architect. Evolution of wireline product line from switched voice channel to voice over IP technology. Monolithic large scale switching systems (4ESS/5ESS) evolving to distributed IP trunking using media gateways with media controllers and Application Servers for advanced features. Presentations and in-depth technical discussions with customers, incl. Verizon, Sprint, AT&T, and Vodafone. Feature functionality and system capacity analysis regarding signaling and trunking evolution. Lead systems engineer and author of requirements for SIP Feature Specification for 5ESS ® Switching System and IMS BGCF, an expedited project. Reliability, Security, Overload Control, Performance and Capacity SME of Signaling, SigTran and SG applications. 3rd Party Signaling Gateway Evaluation (Intel, Artesyn, Adax, Ulticom), and lead for in-house development.

Test and analyze complete wireless network solutions with emphasis on bottleneck areas, packet switched network used for signaling. Designed customer load generator's on top of ATM injector.

Holmdel, New Jersey, Us

Define Next Network Switch for AT&T, successor to 4ESS(r). Translate ambitious reliability, capacity, and functional needs into detailed implementation specifications that are feasible, traceable, testable, and provide backbone network services for AT&T for the following 20 years. Includes prior work in both Naperville and Holmel, NJ on both 4ESS(r) and 5ESS(tm) Systems Engineering specifying new features for backbone domestic and international networks with specialty in signaling protocols and Software Defined Networks (SDN).

Ms, Electrical Engineering

Bs, Electrical And Computer Engineering