Eric Kelson Email & Phone Number

Boston, Ma, Us

Boston, Massachusetts, Us

Boston, Massachusetts, Us

Senior Security Engineer responsible for managing organizations security infrastructure. - Monitored, investigated, and responded to security events across multiple data centers and AWS security accounts- Scoped and deployed security monitor solution across environments - Implemented security automation tools in Ruby and Python- Enforced AWS security best practices across multiple AWS accounts- Designed and implemented security awareness training- Oversaw vulnerability scanning and third-party penetration testing processes

Waltham, Ma, Us

Primary role includes executing risk management program. Secondary role includes SOC analyst and information security engineering.

Boston, Ma, Us

Role included ownership of Tivoli IAM platform, oversight of security portfolio projects and programs, selection of new security tools, and improvement of cross-functional security capabilities. Key activities:- Stabilized production operations and integration processes for the Tivoli IAM product platform. - Transitioned technical support to strategic service provider. - Created security operations and architecture capability roadmap. - Supervised two contractors and strategic service provider - Led data loss prevention and email encryption product refresh projects.

Coordinated with IT operations, business departments, and hospital privacy offices to manage security risks, implement best practices, and identify performance improvement opportunities. - Designed incident response workflow, - Led PCI DSS assessment - Coordinated External Audit of Partners IT Financial applications- Facilitated risk assessment for the enterprise ambulatory care application- Member of Partners HealthCare Information Security Operating and Steering Committees - Drafted security policies and procedures for use throughout Partners organization- Responded to security issues, coordinated evidence analysis with hospitals and general counsel

Gb

Responsible for security consulting, audit support, security strategy, and risk assessment project activities, including managing staff activities, providing oversight and execution of project tasks, and general engagement delivery. Worked in multiple industry sectors including financial services, utility, retail, healthcare, pharmaceutical, telecommunications, entertainment, and higher education. Specialized in the PCI DSS, MA 201 data privacy and ISO 27001 regulatory standards; familiar with HIPAA, GLBA, NERC CIP and PCAOB AS5 (Sarbanes Oxley) standards. - Conducted client PCI DSS, FFIEC, ISO 2700, and MA 201 privacy assessments in multiple industries- Assessed security configuration of UNIX, Windows/AD, network, and database systems- Performed network architecture, web application, policy, and process improvement projects - Developed database security assessment methodologies as member of Database Core Team- Led attack and penetration projects NMAP, Metasploit, NESSUS, and custom scripts- Audited OS, application, network, database, and process controls for SAS 70, Systrust, PCAOB AS5