Eric Isbell Email & Phone Number

Silver Spring, Maryland, Us

- Train engineering and UX teams on vulnerabilities with the OWASP top 10.- Provide monthly presentations and discussions on security topics, initiatives and security best practices- Embed security into every stage of the Agile life cycle by incorporating security checklists into every sprint, threat models into every program increment, and yearly security reviews. - Automate security processes through implementing tools into the CICD pipeline. - Develop Incident Response working group at corporate level- Coordinated and facilitated security table-top and game day exercises for each major release and change in the application(s). - Develop and implement Incident Response training for projects for stakeholders, implementing live action incident response test scenarios

Mclean, Virginia, Us

Provide threat models for each program function per program increment, identifying threat actors and plans for implementation of mitigation strategies. Work with devops engineering groups to implement dynamic scanning in the Jenkins pipeline, with OWASP ZAP.Train engineering and UX teams on vulnerabilities with the OWASP top 10.Provide monthly presentations and discussions on security topics, initiatives and security best practicesEmbed security into every stage of the Agile life cycle by incorporating security checklists into every sprint, threat models into every program increment, and yearly security reviews. Automate security processes through implementing tools into the CICD pipeline. Automating population of security control implementation details with Inspec compliance tooling, which provides detailed reports on items that are within or outside compliance for the application.Charter member of weekly application security guild, where discussions are held on an informal basis pertaining to application security in AWS, vulnerability assessment and proof of concept attacks against application. Coordinated and facilitated security table-top and game day exercises for each major release and change in the application(s). On call Incident Response commander for multiple programs, acting as SME for security events with regards to PII, PHI, and vulnerability assessments. Target application serves an audience ranging into 50+ million individual users. Security engineering is part of larger security initiative at Ad Hoc, working in tandem with other security analysts and engineers for offering additional support capacity

Atlanta, Ga, Us

Supported 300+ member Engineering organization across the globe with infrastructure and application support. - provided back-end server support and front-end user consultancy services for full Atlassian suite including Jira/Confluence/Hipchat/Bitbucket/Crowd- Red Hat system administration- Certificate management- Support for workflow management- Git administration- Vulnerability patching on affected systems

Atlanta, Ga, Us

Security Engineering team responsible for the overall security within the engineering organization. Duties included, but not limited to: - Primarily duties include maintaining security scans using: NTO Spider, Qualys, Black Duck, Veracode and Fortify. -Assisting team members with projects, providing input relating to security to other teams and vulnerability assessment. - Works directly with product managers, software engineering team leads, and compliance managers to develop and optimize security architecture.-Team develops and maintains security related libraries which are used by development teams. -Ensure Security Engineering developed appliances are vetted and stress tested using agile QA testing methodology. - Works directly with other architects, software engineers, and technical leaders to ensure that development, security, and compliance needs are met in a timely manner.- Work with internal audit to ensure compliance within engineering.- Ensure proper protocols are followed in regards to Open Source requests in enterprise environments- Team also develops and maintains security related libraries which are used by development teams. - worked on budgeting and purchasing for yearly licenses for application scanning

Round Rock, Texas, Us

While employed @ Dell, I was assigned as a senior IT analyst for the Mount Sinai Research Hospital in New York, NY, where I provided 1st call resolution to all incidents (both hardware and software) and attempted to find the most beneficial outcome to both the situation and the users needs. - AD management for users-SME for technical and software related issues on helpdesk- develop and deploy a learning management module that was deployed corporate wide. - Perform ticket audits for better workflow management of issues- address discrepancies in knowledgebase

Mclean, Virginia, Us

While employed at the Hilton Garden Inn, I undertook the tasks of performing financial data backups of all the daily transactions, server resets and end of day data relocation through safe-guarded measures. Also responsible for ensuring the hotels balances matched up to the documentation for the days predicted profit.

Documented the lives of WKU students and faculty through writings in the Herald.The Herald's print edition is published on Tuesdays and Fridays during the school year and distributed across campus and in the Bowling Green community. It has consistently been named one of the best non-daily student newspapers in the country.

Bowling Green, Ky, Us

I tutored elementary logic students in the understanding of fallacies and tautologies, truth table mapping as well as basic symbolic logic.

Supervised and coordinated workers engaged in problem-solving, monitoring, and installing data communication equipment and software, as well as ensuring a positive customer experience.