Erich Ficker Email & Phone Number

Provo, Ut, Us

Seattle, Wa, Us

I manage the penetration testing practice here at Moss Adams. Our team specializes in web app, mobile app, network (internal and external), API, social engineering and physical security testing. We can support any driver be it PCI, SOC2, FedRAMP, etc.

Provo, Ut, Us

Salt Lake City, Ut, Us

(combined with Moss Adams in August 2021)

Salt Lake City, Ut, Us

Lead, manage and execute penetration testing engagements for Fortune 100 to recently funded startups. Effectively manage the pentest team to encourage collaboration, cooperation and efficiency.Created and implemented an industry best practice methodology based on experience for uniform testing efforts across multiple team members.Assist clients with remediation efforts (customer facing) and ensure that their needs and expectations are met and exceeded.Evaluate and improve processes and testing procedures for emerging threats for both network and application testing. Implement new industry best practices as often as weekly.

Salt Lake City, Ut, Us

Lead and participated in penetration testing for myriad companies from Fortune 500 to small businesses.Lead IT security risk assessments for varied verticals including financial and public utilitiesAssessed ICS-SCADA enviroments against industry best practices, ICS-CERT/DHS guidelines and ISO standards.

Adjunct instructor in the information systems security program.

Phoenix, Az, Us

Engineered secure architectures for cloud and physical infrastructure on a consulting basis. Assessed existing network architectures, applications and their deployment against industry best practice in an adversarial (pentesting) point of view from both the public network and internal LAN.Designed campaigns and assessed human vulnerabilities (social engineering) utilizing various communication methods: email, phone, text chat, etc.

Newport Beach, Ca, Us

As a Qualified Security Assessor (QSA) I have worked with several companies of various sizes to achieve their PCI compliance and IT Security goals. I like to offer solutions, not just vulnerabilities. This allows clients to instantly plot a course towards compliance instead of getting mired in the details.

Crew chief for a professional road race team in the Grand American Road Racing series, Koni Challenge.Working as a manager in a high stress, high pressure environment I have gained the skills necessary to remain productive in any environment. Where a slight mistake can mean a monetary or a race ending penalty, tasks must be executed properly the first time. Sharing and managing responsibilities with a team of qualified and talented professionals in this high pressure environment, trust and support are integral to success.

• Transacted business on the least trusted network for seven years without a security breach, internal or external• Engineered all security mechanisms including web server hardening, remote employee access, database and sensitive information protection• Holistic security continuity planning• Basic firewall configuration and spam/phishing filtering• Social engineering education and training• Reduced web server attack surface using industry best practices for operating system and application configuration• Managed all security for conducting secure transactions over an insecure network including authoritative certificates and site design• Oversaw all patch and change management to ensure beneficial results and mitigate incompatibility issues and resultant security holes• Ensured application security through proper built-in validation, bounds checking and logging• Managed site back-end upgrades including a single click order processing employee interface further separating sensitive information from employees and adding another layer to defense in depth as well as increasing productivity• Handled all training and education of new hires including security awareness and acceptable use policies• Coordinated business continuity planning including data backup and disaster recovery

Supported frontline support agents working with customers of Microsoft Windows. Solved escalated cases consisting of advanced issues unable to be solved in a timely manner by the frontline support.• Assigned escalated cases to work through to resolution• Managed all clients assigned, set and met realistic expectations• Developed exceptional communication skills and abilities to convey technical concepts to non-technical people• Became intimately aware of Windows technology, how to diagnose and repair

• Hardware and software repair technician• Diagnosis and repair of personal and business computer systems and networks• Problems ranged from malware/spyware, virus infection, software or hardware incompatibility, hardware failure, etc.

Master’S Degree, Information Security (Msc)

Bachelor Of Science, Information Technology