Gregorie Thomas Email & Phone Number

Sydney, New South Wales, Australia

Spearheaded and executed our inaugural HIPAA Type 2 assessment, ensuring compliance and safeguarding sensitive healthcare data.Pioneered the organization's inaugural external penetration test, fortifying our cyber defenses and enhancing resilience against external threats.Established and developed the comprehensive security and compliance framework from inception, ensuring alignment with industry standards and organizational objectives.Streamlined operations through automation of device deployment processes, optimizing efficiency and minimizing manual intervention.Oversaw all facets of internal IT operations, Google Workspace, Google Cloud, and information security alerting, ensuring seamless functionality and proactive threat detection and response.

Wellington, Wellington Region, New Zealand

• Conducted comprehensive security evaluations of various New Zealand government agency infrastructures, identifying vulnerabilities and recommending appropriate remediation measures.• Developed and implemented security policies and procedures in multi-cloud environments to ensure compliance with industry standards and regulations.• Collaborated with cross-functional teams to conduct risk assessments and advise on security issues, including threat management and incident response.• Provided expertise and guidance to clients on information security best practices, including data protection and access controls.• Communicated technical information clearly and effectively to non-technical stakeholders, including senior management, to ensure understanding and support for security initiatives.

• Built and managed a greenfield information security program responsible for protecting 40MM+ health records.• SIEM deployment to collect logs across a multi-cloud & multi-tenant production environment.• Lead the company through a migration from on-prem to Azure.• Rebuilt the inventory and asset management programs.• Lead the company through HITRUST certification for 3 years.• Created and managed vulnerability and patch management programs.• Created and managed our security solutions in AWS.

Greater Atlanta Area

• Performed security assessments and penetration tests of new and legacy technologies.• Led multiple types of risk advisory engagements with a team of 3, including PCI, GLBA, HIPAA, SOX, ISO, and FISMA compliance.• Developed automated tooling to conduct penetration tests.

Atlanta, Georgia

• Designed a new security awareness training program in conjunction with the compliance team.• Worked in a 100% AWS environment using automation with Terraform and Docker.• Analyzed security logs using Splunk Enterprise.• Designed a new asset management program in order to bring the company in line with SOC2 compliance.• Refined filtering on Symantec DLP and code42 products in order to bring down false-positive rates.• Helped develop the SOC to pass SOC2 compliance.

Greater Atlanta Area

• Developed compliant security programs and policies in IT environment in line with FFEIC and Patriot Act.• Facilitated focus on high-priority projects in security and automation, saving hundreds of man-hours in regular IT administration tasks.• Maintained a 99.99% uptime of our DR/BCP facility through continual improvements to capacity and virtualization managing a support team of 15 members on-site.• Improved operational compliance by establishing a patch management program and establishing security metrics, assuring customers of protection levels.• Spearheaded a new hire systems engineer training program to ensure a smooth onboarding of organizational practices and technological environments

Greater New York City Area

• Performed security assessments and penetration tests of new and legacy technologies.• Led multiple types of risk advisory engagements, including PCI, GLBA, HIPAA, SOX, ISO, and FISMA compliance.• Used commercial scanning tools such as AppScan and Nessus to analyze systems for vulnerabilities.• Used commercial and open source tools such as Vega and Burp Suite for application penetration testing.• Conducted internal, wireless, and physical penetration tests against large (>1000 user) environments.• Managed large technical security audits of virtual and physical infrastructures.• Developed security programs and policies enterprise-wide for corporations >$1 billion revenue.• Deep understanding of regulatory frameworks, including PCI-DSS, ISO 27001/2 , COBIT, and NIST 800-53.• Conducted social engineering campaigns against enterprise users to train security awareness.

Greater Chicago Area

• Performed security assessments and penetration tests of new and legacy technologies.• Led multiple types of risk advisory engagements, including PCI, GLBA, HIPAA, SOX, ISO, and FISMA compliance.• Used commercial scanning tools such as AppScan and Nessus to analyze systems for vulnerabilities.• Used commercial and open source tools such as Vega and Burp Suite for application penetration testing.• Conducted internal, wireless, and physical penetration tests against large (>1000 user) environments.• Managed large technical security audits of virtual and physical infrastructures.• Developed security programs and policies enterprise-wide for corporations >$1 billion revenue.• Deep understanding of regulatory frameworks, including PCI-DSS, ISO 27001/2 , COBIT, and NIST 800-53.• Conducted social engineering campaigns against enterprise users to train security awareness.

233 S. Wacker, Chicago Il

• Managed a Puppet infrastructure for multiple sites across a global infrastructure.• Maintained internal tools and documentation Wiki and responded to issues in Jira.• Built master Kickstart images for the quick deployment of servers.• Monitored traffic and networking using open-source tools and yet-unreleased software.• Managed NetApp SANs across multiple sites. • Parsed and reviewed user and security logs using Splunk.• Deep knowledge of the suite of technologies and security risks that support a software application development company; Windows, Linux, Mac OS, Visual Studio, VMWare, Github, Subversion, Active Directory, Samba, and Exchange

Chicago, Illinois

System Adminstration

Greater Chicago Area

- Assembled PCs to customer specifications.- Quoted PC builds to customers for general and specific applications- Personal shopper for individuals needing technical guidance for PC purchases- On-site PC Repair for individuals and small businesses- Quoted, developed, and built SOHO netwokrs for individuals and small businesses- Developed VPN solutions for home and power users

Arlington Heights, Il

Used Armitage and Metaspolit to find vulnerabilities in servers for customers.Streamlined security incident processes and developed a proactive and reactive security plan.Developed company disaster recovery plan for various scenarios.Set up and maintained Snort and Nagios monitoring systems to diagnose network and server related issues.Reduced the amount of security incidents compromised servers through mandatory implementation of firewalls and honeypots for 2000 serversIncident response of compromised servers using customized Nessus scans, and replicating the breach using MySQL injection, weak password breach, and CVEs to exploit known vulnerabilities.Used Nmap, Hydra, and Hashcat to test password weaknesses in company and customer servers.

Arlington Heights, Il

Authored and modified scripts for application deployment and system monitoring.Developed internal knowledgebase with updated information and scripts that automate common tasks and installs.Built and designed CentOS, RHEL servers to customer specifications.Trained Level 1 Support Technicians in basic Linux and Windows System Administration.Set up and maintained Nagios monitoring systems.Managed Xenserver-based cloud infrastructure of 200 servers.Developed and deployed a Hadoop environment.Tested new versions of open source tools to better serve customers and protect data.Monitored and responded to customers via Ubersmith ticketing system.Handled abuse complaints (phishing, DDoS) and 3rd-party security assessments.

Palatine, Il

Responsible for managing oral and injection medicines under direction of physician.Responsible for primary duties such as dressing, checking blood pressure, giving medication, and various other duties.Recorded the patient's condition, care, progress, and problems and discussed observation with case manager and supervisor.Provided transportation for patients to doctor's appointments and for trips outside the home.Engaged patients in physical exercise and rehabilitation to regain lost core strength and muscle mass, and to regain range of motion.Extensively trained in diabetes and the managing of various conditions related to diabetes.Protected and promoted patient's rights and assisted in maintaining independence.Replaced IV and monitored intravenous medication.Maintained the cleanliness of the patients room and common areas.Administered insulin injections and given medicinal intakes.

Us Military Posts In Europe, Fort Hood, Tx, Washington D.C.

Responsible for producing vital intelligence gathered from interrogation reports determining the release or detainment of captured personnel and reported findings to the commander of Northern Iraq operations.Responsible for processing and analyzing massive amounts of data and finding key patterns and evaluating credible threats.Worked with coalition forces, CIA, and the JSOC to produce link diagrams, extracting information from outside and internal resources, and generating finished Powerpoint presentations of completed products.Participated with CIA investigating corrupt individuals within in the Iraqi government and police organizations by producing target packages, map products, timelines, data-mining and generating final reports for investigative purposes.Repsonsible for the gathering and extraction of vital field intelligence within the Middle East and Northern Africa through on-the-ground intelligence work and compiling and analyzing the data to be disseminated to various governmental agencies.

29 Palms, Ca/Great Lakes Naval Station, Il

Satellite Communication Equipment RepairGround Radio RepairMaintenance ManagementEquipment Installation, Setup, and RemovalEquipment ModificationsPrinted Circuit Board RepairMiniature/Micro-Miniature SolderingSurface Mount Technology(SMT) SolderingPersonal Computer RepairSmall Electronics RepairCable Fabrication and Repair

Licentiate Degree, Lpn

Education record

Activities and Societies: Toys for Tots

Radio, Television, And Digital Communication

Activities and Societies: Toys for Tots

High School Diploma, 2003