Frederick Doyle, Cissp, Crisc, Pmc-Iii Email & Phone Number

Albuquerque, Nm, Us

➢Founded CubicPrism Analytics, Inc., a C-Corporation to support the conception, design, architecture, and development of a patented (10,686,825) real-time risk quantitative management product known as RiskPrism®, now in beta release. RiskPrism is an innovative quantitative risk management application that leverages findings from existing IT security devices to deliver actionable real-time quantitative decision support risk metrics. ➢ Interviewed customers and analyzed available IT security device results to identify and mitigate ignored threat data elements. Designed a SQL Server database to capture data from security activity records; created an application to import the data. Presented monthly governance reports to clients to communicate enhanced security postures, resulting in a 92% reduction in time to resolve security alerts.➢ Analyzed the IT security needs of customers to recommend suitable security devices, developed integration specifications and project plans, and led integration of devices into customer infrastructure.

Austin, Tx, Us

Albuquerque, Nm, Us

PHS is New Mexico’s largest healthcare provider. For this role, I use my cybersecurity knowledge and expertise to ensure that proposed solutions conform to PHS policies, standards, and baselines. A also serve as a company-wide in-house consultant for all IT security concerns and have:• Conceived, designed, and executed a scoring of current maturity against the NIST Cybersecurity Framework using the Carnegie-Mellon Capabilities Maturity Model to provide a baseline for maturity improvement strategies.• Authored several “just in time” policies, standards, and specifications in response to Covid remote work and access requirements, providing for a seamless transition of employees and medical staff to meet operational and patient needs.• Conceived and Developed an IT Security Capabilities Matrix that captures and identifies technological and procedural IT security capabilities, allowing for future duplication removal that should result in over $1.5M in technology savings. Also identified IT Security technology and procedural gaps that are being addressed by the responsible teams.• Audited the results of third-party forensics investigations for accuracy.• Automated the collection of information security posture data from third parties on their products and automated the mapping of that data against Presbyterian standards to accelerate the Certification and Accreditation process.

Dallas, Tx, Us

Responsible for delivering solutions to problems assigned from c-suite officers and on projects others could not complete.➢ Led Pareto-based problem-solving sessions to determine tracking and presentation needs of the HR staff and c-suite leaders. Built a database schema and custom application to meet governance needs. Imported data and delivered the program to HR in fewer than 60 days.➢ Evaluated existing threat intelligence corpus to identify and extract intelligence data for quantification and to produce threat probabilities for the iRIS risk platform. Automated threat intelligence-based risk assessments, enabling clients to gauge potential impact of threats.➢ Learned best practices of SharePoint installation and operation. Optimized SharePoint navigation by mapping various sites, sub-sites, and web parts required for a robust communications and storage system. Prioritized client requirements, prototyped the SharePoint installation, led beta testing to ensure that design and flow met expectations. Worked with IT to deliver the SharePoint solution to the entire company.

Dallas, Tx, Us

Guided operations of four distinct teams comprised of four direct and 14 indirect reports tasked with integrating all technical intelligence reporting and amalgamating with threat intelligence.➢ Performed reverse engineering and analysis, served as the primary author of complex analyses, insulated teams to ensure success, drafted realistic budgets to confirm operation within constraints of company resources, proofed and edited reports, ensured logical exposition of research.➢ Researched and reported on customer-requested threat-related topics using hands-on assessment and testing. Authored white papers for MTR inclusion using customer-targeted language and style.

Dallas, Tx, Us

Formed and directed the iSIGHT partners labs. Supervised four direct reports. ➢ Developed a vulnerability research collection website and a distributed management application for tracking global vulnerability partnership submissions. ➢ Implemented and guided a vulnerability research team, gathered c-suite requirements, established budgetary mandates, created policies and procedures for dealing with highly sensitive vulnerability and malware analyses, crafted and developed a workflow application, and standardized research reporting. ➢ Architected a client solution to scrape data from the National Vulnerability Database, conducted statistical analysis on the data using the Common Vulnerability Scoring System and proprietary risk scoring, and presented the data for consumption by the customer’s risk management systems. Developed the iRISK application to automate updates.➢ Designed and developed an application that imported malware samples from numerous sharing sources, decrypting the sample containers using a parameterized method that avoided code rewrites. Constructed a SQL Server database and application to download, fingerprint, store, and retrieve malware sample and analytical data. ➢ Created a risk assessment management program that involved quantifying threat intelligence data and applying results to customer assets and exposure.

Reston, Virginia (Va), Us

Co-led the initiative to revamp the intelligence operations at VeriSign, and assisted the Director of Intelligence in identifying and resolving critical issues. ➢ Assimilating and aggregating work product from disparate intelligence teams.➢ Appending research-based technical information into portfolio.➢ Orchestrating and mediating Pareto-based Problem-Solving sessions to refactor Verisign’s intelligence operations.➢ Developing and implementing process improvements.

Reston, Virginia (Va), Us

The intelligence division of Verisign. Optimally assigned research to managed Labs personnel.➢ Improved overall lab performance.➢ Authored in-depth technical white papers to satisfy customer requests.➢ Tens of thousands of dollars in overpayment recovered by auditing the VCP program, identifying errant and missing transactions and anomalous payments, and repairing the problems.

A vulnerability and malware intelligence organization. Analyzed and reported on malware and a multitude of cyber threat attack types.➢ Configured a multi-server lab environment to quantify the DCOM / RPC traffic demands on a network with Blaster worm infections. Monitored the behavior and extent of network disruption from Blaster infections. Analyzed data to find Blaster caused significant degradation of critical network communications, potentially resulting in a denial of service condition. ➢ Authored technical "deep dive" white papers to satisfy customer requests and iDEFENSE IP portfolio.

An IT and IT security consulting firm. Engaged by clients to identify and resolve business IT issues. ➢ $50,000 in monthly charges eliminated for a client by completing extract, transform, and load operations on claims data and programming a fully functional database application in ten days. ➢ $100,000+ saved by configuring CHAMPION accounting software to store data to hard drive, allowing client to maintain accounting history.

Led and trained team of four felony-level criminal investigators.➢ Increased felony closure rate from 18% to 52%.➢ Trained investigative personnel in advanced investigation techniques.➢ Investigated felony-grade criminal activity.➢ Interviewed victims and witnesses and interrogated suspects.➢ Collected and processed physical forensic evidence.➢ Implemented first departmental intelligence program.➢ Conducted computer-related forensic investigations, including the first prosecution in Onondaga County.➢ Conducted financial forensics and investigations.➢ Designed, developed, and implemented case tracking, evidence tracking, and intelligence tracking applications.➢ Implemented the entirety of the department’s computer systems and networks.

Electrical Engineering

Electrical Engineering

Electrical Engineering