Gary Mccully, M.S., Cissp, Oscp, Gxpn, Ceh Email & Phone Number

San Jose, Ca, Us

Rockville, Maryland, Us

Per the SANS website, "Participation is by invitation only, and is presented to GIAC professionals who earn an average score of 90% or better on their certification exams."http://www.giac.org/certified-professionals/advisory-board

Green Bay, Wisconsin, Us

As a Red Team Engineer at Associated Bank, I perform Red and Purple Team assessments against the network to ensure internal security personnel are properly trained to detect and respond to potential threat actors. Additionally, I perform Adversary Simulations, Product Testing, and Application Assessments. I also work with Threat Intelligence to analyze new vulnerabilities and better understand the ease of exploitability within the current environment. Additionally, I perform assessments against organizational security controls to ensure they continue to work as intended. I am a major proponent of automation and utilizes scripting whenever possible to automate repetitive tasks.

Paris, Fr

As a Senior Consultant, I was responsible for helping organizations with the identification of various vulnerabilities within their internal and external networks and assisting internal teams to develop a process for remediating these vulnerabilities. I created and implemented hardening standards and procedures for Red Hat Linux 5 & 6, Windows 2007 & 2012, Open BSD, Microsoft SQL Server (MS-SQL), Microsoft's Internet Information Services (IIS) and Apache. Additionally, I created and tested templates used for auditing these various systems and applications using Qulays' Policy Compliance Module.

As a Technical Specialist at SecureState I performed countless security assessments for organizations within the financial, industrial, health, educational, consulting, and retail industries. My primary area of expertise was web application security, and I was the lead web application security consultant. I also performed assessments that aligned with SecureState's various consulting groups including Profiling (ethical hacking), Risk Management, and Audit and Compliance Teams. Some of the tasks I performed at SecureState are as follows:-The development of web application testing processes and procedures for the various types of web application assessments that SecureState performs, as well as training internal personnel on the execution of these processes. This includes both manual and automated web application assessments, web services assessments (SOAP, REST, etc), secure coding practices training, web application architecture reviews, and white box (code review) assessments. -Performing attack and penetration assessments that focus on various organization's external, internal, and wireless networks.-Evaluating the configurations of many devices and platforms in order to verify they are built in accordance with security best practices. These devices include various firewalls, routers, and switches as well as various servers (e.g. Windows 2008, Tomcat, Web Logic, Oracle, and ESXi).-Reviewing, developing, and creating both internal and external Vulnerability Management Programs for multiple organizations.-Reviewing network architectural designs of various organizations in order to verify they were designed in accordance with security best practices. -Performing both PCI audits and gap assessments.

Us

I managed the corporate usage compliance program to ensure adherence to HR and Security Policies. Responsible for managing offshore user access. Additionally, I assisted with the National City Vendor Security Review Program, which included reviewing the security controls of vendors being considered by the corporation.

Us

I performed advanced troubleshooting of users' IT-related issues, including IP related connection problems and systems used for critical infrastructure. Additionally, I researched, developed, and created documents related to remote access. Finally, I assisted in the training and mentoring of National City Technical Service Desk new hire classes.

Us

I received calls related to technical problems and performed initial triage and/or escalation. Additionally, I regularly coached and trained Technical Service Desk personnel in regards to remote access troubleshooting and procedures; I was the Remote Queue primary for the National City Technical Service Desk.

Doctor Of Philosophy - Phd, Cyber Operations

Misc. Computer Science Classes, Computer Science

Master Of Science - Ms, Information Assurance And Cybersecurity

Graduate Certificate, Digital Forensics

Bachelor Of Science - Bs, Biblical Studies

Associate Of Arts, General Studies