Eric Kolb Email & Phone Number

Annandale, Va, Us

Austin, Texas, Us

Leader of an organization of 8 security analysts and engineers responsible for vulnerability management within Oracle's Global Business Units, a multi-vertical division delivering on-premise and software-as-a-service solutions for finance, health sciences, utilities, construction engineering, hospitality, industries and more. Duties include operation and oversight of vulnerability scans; triage of major external vulnerability disclosures; coordination of action items and review of exemptions with various teams accountable for security fixes; and representing the vulnerability management program in internal and external audits such as SOC 2 controls, PCI Data Security Standard, HIPAA, and customer audits.Team accomplishments during my tenure include:* Spearheaded a major project to retrofit the GBU's vulnerability management program from consumer-off-the-shelf tools to an internally-developed tool stack within Oracle Cloud Infrastructure.* Planned and developed a layer of automation tooling to adapt Oracle Cloud Infrastructure services for rapid uptake by Global Business Unit teams.* Increased the operational security maturity level of the Global Business Units' vulnerability management program to Managed or Optimized levels.* Successfully on-boarded 5 different acquired companies into the GBU vulnerability management program.* Maintained an exceptionally high level of staff retention over more than five years.Additional accomplishments and responsibilities include:* Served as a certified Internal Security Assessor per PCI Security Standards Council for Oracle.* Responsible for other business-as-usual security functions, including privileged user access reviews, program reviews of network access control lists (both firewalls and infrastructure-as-code).Originally part of the Opower security team prior to acquisition by Oracle.* Oversaw all aspects of integrating Opower's security operations into Oracle standard procedures.

Maryville, Tennessee, Us

Responsible for day-to-day security monitoring operations, risk management, application security, and incident response. Managed a team of five security analysts. Major contributor in governance and compliance projects.Major accomplishments include:* Development of a PCI compliance program (Level 3) for retail and insurance business units, resulting in first time certification for those business units.* Development of a vulnerability assessment and management program, resulting in enterprise-wide risk reduction and control.* Formalization of a risk reporting & remediation workflow, which ensured IT leadership had visibility of new risks and could assign accountability to remediation efforts.* Formalization of an incident response procedure, ensuring that negative events were handled swiftly and expertly while keeping leadership at all levels informed and updated.Worked with the following technologies (vendors withheld for operational security):* Security information and event management (SIEM)* Next-generation firewalls* Web application firewalls* Database activity monitoring* File activity monitoring (both file servers and SharePoint activity)* Endpoint vulnerability scanners* Sensitive data at rest scanners* Dynamic application scanners* Application whitelisting* Process-based forensicsExperience with the following compliance programs:* PCI-DSS (Level 3)* HIPAA* Sarbanes Oxley* GLBA* FTC Red Flags RuleClayton Homes is a multi-vertical corporation and a subsidiary of Berkshire-Hathaway. Its business units are involved in the financial, insurance, retail, and manufacturing industries.

Worked primarily with Web & Circus AS, a Norwegian based start-up company, to develop a virtual world and game hub Zoovolution targeted at the 9-13 year old market. Unfortunately the project ran into funding challenges and never had the opportunity to reach fruition. Responsibilities on that project covered the front-end web site, the parental management portal, and architecture and back-end support for the 2D flash-based world itself.

Maryville, Tennessee, Us

Los Angeles, California, Us

Champaign, Illinois, Us