* Develop homegrown endpoint scanning solution in Powershell for compliance reporting.* Manage vulnerability management platform (Qualys).* Begin development of formal vulnerability management program.* Assisted in development of formal GRC processes (DM360).* Manage endpoint security solutions (Sophos AV/EP).* Drive migration to alternative endpoint security solution, including processes and polices (Cisco AMP).* Begin development of department documentation platform (Mediawiki using Semantic Mediawiki, Semantic Result Formats, and PageSchema, etc.)

• Drive best practices for customers with solutions tailored to specific business needs.• Drive and develop proactive methodologies to reduce issue frequency and severity.• Drive billable hours to achieve personal, team, and company revenue goals.• Onboard and upgrade clients across infrastructure, software, and security solutions.• Directly manage customer relationships during elevated service situations.• Guide small and mid-sized financial institutions through security and compliance audits.• Developed proactive ITSM and security processes for regulated clients, including patch management, vulnerability scanning and remediation, active directory review, and access rights.

• Led incident research and response as a First Responder on the Incident Response Team.• Managed and led audits of security policy compliance, account activity, network share security, installed applications, patch level compliance and file level auditing using Nessus, Hyena, nCircle,• MBSA, and a variety of custom built tools written in Perl and Powershell. • Managed security awareness campaigns and enterprise-wide security education initiatives.• Implemented and managed solution for delivery and reporting of Information Security training.• Designed, developed and implemented an enterprise risk assessment reporting process.Regular presentations at employee, manager and officer meetings on general information security topics and specific Information Security Policy points.

• Led enterprise installation of a centrally managed password and document storage system as well as an enterprise encryption solution for protecting data both in transit and at rest.• Managed, customized, and supported the enterprise IDS monitoring system, the distributed network scanning system, and the enterprise SIEM solution. Built and deployed custom agents for SIEM collection from disparate systems.• Authored and automated monthly executive reports on Information Security.

• Monitored, configured, and maintained enterprise network security, including perimeter and internal firewalls, IDS and HIDS, VPN, and network / application scanning. • Architected, deployed and maintained IDS solution using Snort sensors and ACID analysis engine.• Wrote security policies and standards for Information Security Governance and Risk Management.• Worked with federal examiners and audit firms to ensure all GLBA and SOX requirements were met. Worked with external penetration testing firms to expose vulnerabilities and validate fixes.• Built custom security tools to address vulnerability scanning, account auditing, and log reporting.• Point of escalation for troubleshooting network, server and application issues.

• Implemented and maintained CVS and Apache across 5+ Sun Solaris 5.6/8 and VA Linux servers.• Responsible for Apache configuration and performance issues. • Architected and implemented a three tier solution environment and code migration schedule.• Developed a solution to automate code migration through this schedule. Converted the three tiered architecture to a four tier structure to better handle emergency releases and bug-fixes.

• HTML/graphic design.• Applications programming using perl.• Apache Web Server administration.

• Web development• Help desk