Thomas Fischer Email & Phone Number

County Dublin, Ireland

Los Angeles, Ca, Us

Part of a team whose mission is to protect Riot and its players .Helping to monitor and analyse Riot Games’ security efforts across the organization and for its players. Measuring success through implementing the right tools and automation to quickly detect, analyze, and respond to threat actors across the globe. - Mentoring and overseeing performance management and growth opportunities for security engineers; - Triaging and investigating security events (incident-response, threat-hunting, malware analysis, memory analysis, disk-forensics); - Working with product teams and security leadership throughout the incident investigation cycle to ensure remediation, eradication and lessons learned are rolled back into daily operations; - European escalation point for all security events and investigations, and contribute to Riot Games’ global Security Operations road-map.

Conduct deep dive research into existing systems to build to build an on-demand threat hunting platform in the domain of threat hunting, malware analysis and digital forensics incident response (DFIR) focused on improved security around critical assets. Independent consultant advising companies on managing their data protection activities against malicious parties through implementing threat hunting, DFIR, security architectures, and regulation compliance to include the European Union’s General Date Protection Regulation (GDPR).Key projects:- Developed framework architecture and IR procedures to implement a green field SOC/NOC for a UK customer.- Developing and delivering a threat hunting training using open source tools.- Supporting a UK company with incident management and RCA for advanced threat actor (nation-state sponsored) attack and compromiseOpen to explore new opportunities, feel free to reach out.

Bethesda, Md, Us

Non-profit organisation. Lead member of Core Team.Helping organize and prepare the SecurityBSides London event through management of logistics, preparing call for papers, planning and project management. Motivating and enlisting volunteers to assist in the ongoing activities across the planning and delivery of the event. Recording and document decisions.

Bentonville, Arkansas, Us

Working as part of the organisation’s application security program to improve and implement agile secure development lifecycle service working with developers to build secure software. Implementing a “shift left” program by identifying processes and tools to allow developers to own security and deliver secure code including third party component vulnerability management, automated threat modelling and developer focus metrics (gamification). Executing security architecture reviews, application code reviews and creating secure development training materials.

Eden Prairie, Minnesota, Us

Collaborated with Chief Information Officers, Technical Champions and IT Security Managers and their teams to articulate their security needs and develop incident response plans using the Digital Guardian endpoint agent to gather network, registry, file and process activity (like Sysmon). Analysed data using tools such as ATT&CK, Yara, Bluecoat MAA, FireEye, and Cuckoo used to gather indicators and Tactics, Techniques, and Procedures (TTP) to identify threat actors allowing customers to launch more formal investigations.• Partnered with customers and SaaS teams to aggregate with secure platforms using host and network-based firewalls, HIDS, IPS, and Log/Event Management (SIEM).• Participated in the definition product requirements (PRD) and road map directions including assisting in the design, build and configuration of an analytics platform for threat hunting activities to replace existing SIEM based on output of research on current threats and risks being seen in the industry as well as evaluating competitor products (Carbon Black, Sqrrl, CrowdStrike, Cybereason)• Global expert on the GDPR, leading product requirements definition and customer advisor on best practices and align the Digital Guardian solution to comply with the regulation.• Led architecture design and deployment of cloud-based services, including SaaS, for AWS and Azure-based solutions.• Managed specific technical tasks to solve complex problems and integration of new 3rd party technologies with the Digital Guardian solutions including building a malware analysis lab and rule testing tools.• Served as technical authority for the sales enablement process on cyber security and Digital Guardian solution assisting in customer meetings, PoCs and RFP responses.

Eden Prairie, Minnesota, Us

Senior consultant in charge of helping customers implement their DLP programs and the Verdasys Cyber Security & APT detection solution including the design, deployment and audit of the products including host and network-based detection, document classification; assisted in defining the customer offering around the Cyber Security solution.

Paris, France, Fr

Security Architect for infrastructure services working with Capgemini customers on security projects from requirements building to design and build/test. Worked with key customer accounts to design mobile management platforms, identity management processes and solutions, SCADA security, and threat management activities.

Issy-Les-Moulineaux Cedex, Ile De France, Fr

Senior consultant in charge of helping customers implement their security programs around the design, deployment and audit of OpenTrust products including PKI, Smartcard Management, Secure Sharing, Digital Signature.Working with customers and SAAS teams to secure platforms using host & network based firewalls, HIDS, IPS, and Log/Event Management (SIEM).

Issy Les Moulineaux, Fr

Senior consultant in charge of helping customers implement their security programs around the design, deployment and audit of OpenTrust products including PKI, Smartcard Management, Secure Sharing, Digital Signature.Working with customers and SAAS teams to secure platforms using host & network based firewalls, HIDS, IPS, and Log/Event Management (SIEM).

Working as independent security architect and developer focusing on web site security and redevelopment and mobile application development under iPhone and Android including building secure back-end delivery infrastructures

Houston, Texas, Us

Promoted to serve as the architect for security infrastructure services internal to Schlumberger, IT Enterprise Services in managing wireless security, perimeter security, process security, end-point security, de-parameterisation projects, and 3rd party secure connectivity. The scope of competencies included defining security best-practices and architectures based on WPA, 802.11i, SSL-VPN, PKI, Firewalls, IPS, Log/Event correlation, smart cards, SSO and two factor authentications. Led internal compliance auditing, standards implementation and part of global incident handling team. Directed service security design management and security configuration management for the all components related to the desktop or server environment including OS, Applications, SPOC for 3rd Party security software. - Representative for Schlumberger to the ETSI standardization group on BSM (Broadband Satellite Multimedia) and to the SPE Oilfield Integration and Security standards committees.- Managed regional incident response activities for malware breakouts, HR incidents and data leaks using various tools including SIFT for workstation imaging.- Co-led Mobile Technologies Special Interest Group and Eureka IT/SW Community (Schlumberger Eureka 2003 to 2006).- Held other positions in Schlumberger as Executive Consultant for Networks & Infrastructure Solutions, as Wireless Consulting Manager, and as LAN services Manager

Houston, Texas, Us

Performed network and security solutions design with two and three factor authentication including the use of PKI based solutions as well as network and security assessments in the areas of Windows 2000 architecture, Active Directory design, and physical network capacity. Established solutions for network, user and domain management tools with a focus on the security perspective.Technical adviser and senior consultant for the initiation and development of a global wireless consulting practice focused on implementing secure wireless solutions for the enterprise and public. The scope of competencies included defining security best-practices (based on WPA, 802.11i), security solutions (EAP w/smart card).Technical adviser and senior consultant for the initiation and development of a global SCADA security consulting practice focused on providing risk assessment and design of security solutions for SCADA infrastructures

Houston, Texas, Us

Responsible for establishing and developing a technology consulting practice focused on providing consulting services around Wireless technologies such as GSM, GPRS, UMTS, Bluetooth and WLAN and later around Security, Wireless-LANs, infrastructure systems (Windows 2000, UNIX, Linux, Messaging) and the management of the systems. Participation in product development for mobile operator WiFi solutions such as EAP-SIM, HotSpot billing solutions, just in time advertising and localization services.

Houston, Texas, Us

Responsible for establishing and developing a technology consulting practice focused on providing consulting services around Wireless technologies such as GSM, GPRS, UMTS, Bluetooth and WLAN and later around Security, Wireless-LANs, infrastructure systems (Windows 2000, UNIX, Linux, Messaging) and the management of the systems. Participation in product development for mobile operator WiFi solutions such as EAP-SIM, HotSpot billing solutions, just in time advertising and localization services.

Houston, Texas, Us

Responsible for a team of 20 people in charge of the desktop, server and intranet support needs for various clients (including Schlumberger and TotalFina). Infrastructure support needs for the Schlumberger Account.Implementation and management of remote support for the TotalFina Messaging Hub. System based on a HP/UX D3x0 server, Windows NT Server gateways, Control Data Mail*Hub 98, Lotus cc:Mail, Lotus Notes, SMTP, X400, and Microsoft Exchange integrated system.Project Manager for the implementation and integration of the Sediver hosted intranet system. System based on the Microsoft BackOffice suite of products (including Exchange 5.5, Site Server 2.0, IIS 4.0 and Proxy 2.0) with an internet connection protected by Checkpoint’s FireWall-1 VPN product

Ch-1009 Pully/Lausanne, Switzerland, Ch

Senior Systems Engineer with Tetra Pak Information Systems in charge of • Implementation and deployment of a regional data center and implementation of a regional network infrastructure capable of handling the new IT needs (SAP, Data Mining, Production Control).• Evaluation of user needs for IT Solutions. The analysis was then used to source and implement existing applications or develop internal solutions with emphasis on integration of SAP R/3. Assignments were completed on a global, regional and local basis.• Implementation of the corporate Common Operating Environment in the Asia/Pacific region providing a regional savings of 18% to 25 % on cost of infrastructure support• In charge of Design Solutions and Programming Specifications for the Invoicing subproject (Mac/VAX-ACMS client-server applications).

Mscit, It

Ba, French Studies, Computer

Master Of Science - Ms, Information Technology