Assumed full-time responsibility for the FCA vulnerability management (VM) program after a decade of demonstrated proficiency with the Qualys suite of security products; scope covered 50,000+ on-premise and cloud assets around the world, and included policy compliance and related disciplines; worked with security and business stakeholders to quantify, prioritize, and remediate findings; synthesized threat intelligence from multiple sources and participated in incident response activities as needed; developed remediation and mitigation plans for specialized, non-standard, and obsolete technologies; evaluated high value assets in emerging markets; developed work instructions and tutorials; mentored and trained a global network of program volunteers; responsible for system administration, training, reporting, and infrastructure maintenance; calibrated scan timing, intensity, and yields in manufacturing plants operating at full capacity; defined, procured and deployed optimal mixes of tools and sensors to locate and evaluate corporate assets.- Qualys expertise routinely resulted in tool customizations being implemented prior to formal vendor guidance and documentation. - Developed global VM strategies and solutions to quickly adapt to remote work and cloud computing initiatives.- Developed dashboards for proactively identifying patterns of neglect in internal and third-party remediation programs.- Industrial control system analysis and remediation since 2006; worked directly with ICS vendors to revise code and apply patches.

Responsibilities involved modernizing technologies used by our rapidly expanding security team, emphasizing global deployment and coinciding with a revamped risk management philosophy set in motion by the CEO. Activities involved multiple trials and rapid proofs of concept centered on endpoint, web application, and cloud security. Notable successes included a global standard for managed file transfer, uniting far-flung teams and enabling secure collaboration; developing approaches to data security in emerging markets around the world; boots on the ground security assessments of key suppliers, subsidiaries, and shared facilities; penetration testing coordination and remediation; and several well-received incident response and security awareness communications.

As a charter member of Chrysler's Enterprise Information Security (EIS) Team, handled architecture duties for a large portfolio of Manufacturing, B2C, B2D, Supplier, HR, and Finance systems in various stages of development; performed over 1,000 security reviews/risk assessments for purchased and internally developed applications involving hundreds of technologies; along with veteran teammates, routinely achieved cost savings by avoiding redundant systems and linking customers with proven alternatives; consulted with developers, project leads, and process owners to strike the proper balance between policy enforcement and acceptable risk; authored and edited security policies, standards, processes, and position papers.

Served NAFTA’s nascent information security program as an access and identity management consultant; worked with business teams to integrate their web enabled applications with SiteMinder single sign on and session management. Translated security requirements into rules, policies, and authentication schemes in order to protect and manage access to a spectrum of corporate applications, most notably those that comprised the supplier network portal. Performed web agent installations, resolved customer service requests, assisted with infrastructure upgrades.

Led the embedded software development component of a Visteon cockpit automation project, a very early prototype of the connected vehicle components marketed today; developed proposals, contracts, statements of work, project plans, and presentations to stakeholders at all levels in pursuit of new business for the company; developed corporate web presence including functionality for job and resume upload and search, allowing the company to streamline its recruiting and placement efforts; responsible for layout, copy, graphic design, programming, server administration, and troubleshooting.

Led a merger & acquisition integration project driven by Breed’s purchase of AlliedSignal Safety Restraints; developed business cases and secured funding for networking and collaboration technologies that united the two companies and their 1,600 users at eight North America locations; served as a liaison between plant and corporate IT staff; oversaw help desk and network support for engineering headquarters.

Managed all IT services in a trans-border, multi-site manufacturing complex with annual production of 23 million units and $115 million in sales; resolved MRP and supply chain issues; formulated budgets; hired, retained, and mentored team members; supported facility moves, consolidations, and infrastructure upgrades; designed HR and Quality Control document archiving solutions, as well as an award-winning system for tracking defects as part of the company’s Six Sigma initiative.

Responsible for upgrading multiple manufacturing facilities from dedicated terminals and primitive PCs to a networked Wintel 3x environment; provided deskside support and bilingual end user training at three locations in Agua Prieta, Mexico; administered and maintained business, remote access, and voice/telecom systems; supported migration to QAD MFG/PRO ERP and performed associated HP-UX system administration.

Wrote, edited, and published historical narratives of Air Force combat units in peace and war; curated commemorative works for short and long-term display; provided information and analysis to leadership to support operational planning; responded to research requests from private organizations, government agencies, and the general public; interviewed key historical figures, subject matter experts, and battlefield participants; handled and created classified materials up to and including Top Secret.