My current focus is Application Security services which includes Web Application Firewall (WAF), Database Activity Monitoring, and SAP security. I lead small teams for security operations which covers both SOC Engineering and Operations, and and SOC Analyst and Incident Response.

I am currently a Senior Security Engineer and team lead for a small team of security engineers. We build, maintain, and improve security tools for the entire P&G enterprise which are used by our Global SOC, Incident Response Team, Hunting Team, Network team and other security service teams.My primary roles include:• Web Application Firewall and DDOS• Vulnerability Scanning• Database Activity Monitoring• SAP Vulnerability Scanning• End-to-End Logging, Monitoring, and Alerting Process Design• Integration and use case design: SIEM tools

• Onsite event management which includes leading a staff of 30+ between 6 different teams in high-energy situations• Organizing and overseeing volunteers to handle a variety of roles for each event• Creating re-enactments, story-lines and scripts for individuals and groups before, during, and after each event• Writing new rules and reviewing current ones with a team of designers• Mediation of rules discrepancies• Maintaining equipment to ensure high standards of safety• Continually striving to enhance events through identification of problem areas and implementation of improvements• Mediation for customer or staff complaints to ensure a positive experience for everyone involved

• Collaborate with the Protiviti team and internal resources to provide guidance for the organization’s overall security posture• Participate in workshops to align vendor offerings and processes to P&G standards• Design and recommend integrated security system solutions to increase security for data at multiple classification levels• Direct and collaborate with vendors to meet aggressive project goals and deadlines• Review existing use cases to analyze gaps, and propose new use cases to be implemented into ArcSight and other SIEM solutions

Responsible for the deployment, operation and maintenance of security device technologies.Key Deliverables and Responsibilities (include but are not limited to) the following:• Configuration and deployment of the defined security solution components (security technology) • Write and perform validation tests. • Contribute to the development and tracking of IT Security deployment projects plans. • Monitor and control the performance and status of security devices, including routine testing, analysis and other operational tasks. • Build and manage Security tools such as Trend Micro Deep Security Manager, McAfee EPO, Qualys, Nessus, Arcsight SIEM, Splunk, Imperva, Cisco Sourcfire IPS, and Verizon HIDS, based on use cases and content and driven from customer requirements. • Deploy the security technology solution to fit client requirements by adapting from reference architectures, including technical diagrams and bills of materials for implementation. • Assist in the analysis and resolution of security incidents and in providing containment recommendations using software and hardware tools and following established procedures and corporate policies. • Participate in security audits and audit remediation. • Develop and maintain standard operating procedures, processes and guidelines for IT security operations, support and maintenance. • Maintain awareness of trends in security regulatory, technology, and operational requirements.

• Domain Administrator, including Systems, Network, and Security• Improved Information Security Governance and Risk Management by implementing new processes and fine-tuning existing policies and procedures. Documentation is reviewed and updated quarterly or as-needed during change management processes.• Improved Telecommunications and Network Security by maintaining and hardening VOIP PBX and Web Servers• increased Operations Security by evaluating resources for vulnerabilities, mitigating or removing vulnerabilities, and successfully minimizing risk during and after incident response• Responsible for managing a small agile IT Team who supports local staff and trainees from around the globe• Reduced power consumption by 75% by consolidating server infrastructure with Microsoft Hyper-V• Reduced DR time for mission critical servers from 1-2 days to less than 5 minutes by leveraging Microsoft Hyper-V Replica and Extended Replica• Assisted in merging domain infrastructure assets during a company merger in late 2010• Maintained hardware and software, including testing and implementation of technology-based courses and evaluation of new technology solutions• Web Administrator: www.maxtrain.com and www.truenorthcan.com• Administrator of SQL Content and Reporting Services, including Microsoft Dynamics CRM• Facilities Administrator – building maintenance and physical security.

• Administrator of Active Directory environments, Citrix connectivity, BlackBerry Enterprise Servers, and AS/400 mainframes

• Trained to handle FiOptics, DHCP, Static IP, wired and wireless networking, software, and email, including BlackBerry Smartphones and other cell phones• Honed my troubleshooting skills while providing excellent customer service• Trained in overnight procedures, including daily, weekly and monthly reports

• Provided Helpdesk Support for coworkers and clients• Maintained Antivirus and Anti-Spyware software – Symantec AV Clients• Maintained Hardware and Software, including Windows XP, Mac OS 9/10, Microsoft Office 2003/2007• Network Administration, Email Administration, and Disaster Recovery Planning