Eugene K. Email & Phone Number

Englishtown, Nj, Us

Leading Technology and Information Security services for a Woman's Owned Small Business. Acting as a Cybersecurity Evangelist to existing and new clients. Assist with proposal and bid preperation.

Us

At Port Authority of NY & NJ, fulfilled a senior cyber security SME role and am a trusted advisor to the head of enterprise Cybersecurity program. Supported organization to plan and articulate short-term and long-term strategy for C-level stakeholders.Effectively plan, define, direct and lead the execution of information systems and data strategy across diverse sets of organizations with conflicting interests. Responsibilities span from strategic planning, program definition, team leadership and mentoring, and enterprise wide cyber security advocacy to enhance business resilience. Planned, organized and co-proctored Cybersecurity Incident Response Team tabletops, working groups, and remediation advisement boards.Initiated an adoptive campaign and built processes to advance enterprise integration of NIST framework in the day-to-day operation.Developed a diversified team of seasoned cyber security experts to support all aspects of Port Authority’s business lines from transportation, aviation, energy, infrastructure, healthcare, to financial services. Assisted with strategic planning and execution of Port Authority wide technological, training, and policy initiatives.Planned, developed and implemented enterprise-level GRC programs to reduce enterprise risk exposure due to technological, compliance, and regulatory liabilities. Provided security policy, engineering and architecture expertise during audit proceedings, response strategy boards and remediation efforts for PCI DSS and HIPAA audits.Engineered and implemented an assortment of security technologies and programs, such as Data Loss Prevention, Application Control, Configuration Management, GRC etc. Devised corporate control validation mechanisms to enable quantitative program maturity evaluations.Vendor and product security assessments and participation in procurement decision groups for all Port Authority procurements.

Norfolk, Va, Us

Cybersecurity Security Program

Ellicott City, Maryland, Us

On behalf of government client implemented and supported capstone training and certification program for advanced computer network operations candidates. As part of the evaluation team interacted with students in variety of operational roles as part of their fast-paced, time-sensitive capture the flag interactive simulation. Develop and enforce benchmark governance and grading criteria for interactions with offensive, defensive and forensic activities in multitude of computing systems (Windows, Unix, Firewalls, etc.)Responsibilities included, but not limited to, design, development, and maintenance of around three dozen virtualized hybrid enterprise network scenarios with multitude of interactive sinkholes and analytical challenges; review of traffic, command and scripts used to conduct operations for grading and assessment purposes.

Mclean, Va, Us

In support of a security focused government agency, provided cyber security consulting services for variety of global enterprises.Developed and maintained relationships with all levels of client leadership while managing multiple projects simultaneously.Identified and lead implementation against operational targets and long-range plans aligned with the organization's strategic plans.Facilitated reverse engineering of enterprise IT architecture and security posture of highly fortified and sensitive information system environments. Build network implementation diagrams, identity management and threat modeling.As part of the discovery effort evaluated architecture, network design, security product utilization (Netflow, MRTG, TMG, ESM, IDS/IPS, etc), virtualization (VMware, AWS, etc) and central management practices, information integrity (in transit and at rest), advanced persistent threat (APT) detection (malware, botnet, etc), security governance, identity and access management and audit implementation. Identified business assets of the enterprise, rank and model data flows in order to gather external and internal dependencies and utilizing STRIDE list conduct threat vectors analysis.Discovered security identity and access management principles and trust levels of communications between systems (authentication, authorization, RBAC, Kerberos, AD, SAML, etc) flushing out security control weaknesses. Lead penetration testing activities utilizing proprietary state of the art attack environment to identify security gaps, validate vulnerability vectors and governance failures.Developed and reported findings and solutions to all levels of client leadership. Facilitated creation and execute on strategic security and organizational goals. Provided on job training and scenario based learning activities to assist integration of the new staff and on the job training for existing team members.

Reston, Va, Us

Lead the Integrated Intelligence Division team in a design and development effort to create, replace and integrate number of disperse and ill-designed legacy systems into a modern, scalable, and mobile tactical command and control system for the US military.Conducted technical analysis of individual implementations of legacy systems (application, data model, hardware, and security), developed architectural and system designs (business flows, operations continuity strategy, data conversions, API exchanges, security and system requirements), lead team in the development and integration of the components of the infrastructure. The effort required coordination, collaboration and negotiation with a diverse set of vender with diverging and conflicting strategies, implementations, technologies, hardware footprints, and security requirements. Success of the task was contingent on proper information management to maintain focus on the strategic goal, robust scope of work and quality control process.

Bridgewater, New Jersey, Us

Leading numerous enterprise level development and integration activities through a formal SDLC.

Bachelor Of Science - Bs, Computer Science

Chief Information Security Officer (C|Ciso), Information Security Leadership

Certified Cyber Network Operations Evaluator

Certified Cisco Network Analyst (Ccna)

Certified Ethical Hacker (Ceh)

Sans

Project Management Profesional (Pmp)