Helping counter the threat of malicious deepfakes and disinformation.

GIAC Advisory Board (Member)Infragard New York Metro Area Chapter (Member)InfragardNCR - Cyber Health Working Group (Member)CTI League (Volunteer)

Simplifying security and compliance challenges for startups and small-businesses.Virtual CISO services; Holistic Risk-based Security Assessments and Remediation; HIPAA, SOX, FERPA, and PCI compliance setup and assessments

Consulted on the Mr. Robot Season 3 "Ecoin Launch Party" promotion event. The event was a part of the TV show's New York Comic Con presence.

Led 2U's information security program to the next level with an exotic mix of strategic security program management and hands-on DevOps security engineering activities.

Technical security architecture lead, internal risk assessor, and cybersecurity program manager for the Marvel Entertainment division.Involved with the following Information Security Controls and Objectives:Information Security GovernanceInformation Security Policy and Compliance Gap Analysis and Remediation (PCI, COPA, SOX)Information Security Program Development and ImplementationAsset Ownership and Data Classification Vulnerability ManagementIdentity ManagementIncident ResponsePenetration TestingApplication Security Assessment (White-box / Source Code Analysis)Secure SDLC implementationInfrastructure Hardening (Minimum Security Baselines)Information Security Assessments for third-parties, partners, vendors and cloud providersSecurity Architecture (Applications and Network)

• Senior member of the Network and Systems Security team for the second-largest secular not-for-profit Health System in the nation, with over 40,000 employees and affiliates• Defined information security architecture and led implementation of security solutions• Acted as subject matter expert for senior leadership and participated in strategic planning• Interfaced with HR, Legal, Corp. Security, Compliances and VP-level leadership across different business units to provide internal investigation and e-discovery services • Provided clarification of policy, support and direction for day-to-day security operations activities• Led the implementation of the following projects taking into account high availability and scalability for 40,000 users:Web-content filtering, Network Trending and Anomaly Detection, Application Firewall, Two-factor Software Tokens, Risk-based / Multi-factor Authentication solution• Identity Management: Part of a team tasked with automating user provisioning and deprovisioning• Evaluated Mobile Device Management and created PoC environment for multiple Single Sign-On solutions