Leader of a global program and team responsible for threat detection engineering & threat hunting, detection/alert engineering consulting, incident response processes, and product & service management.Architected and managed the implementation & migration to a “Detection As Code” operating modelDesigned and implemented scalable tuning across the catalog of detections and multiple lines of businessImplemented an agile development model for detection engineering to be run by other team membersLead the detection engineering team’s effort to expand monitoring to the entirety of the SAP enterprise

Leader of a global team that is responsible for security operations, incident response, threat and vulnerability management, threat detection, threat intelligence, and security information and event management.Enhanced the Threat Detection program by driving the onboarding of new log sources, evaluating and rationalizing current log sources, and creating new processes and guidelinesImproved the Incident Response program capabilities by implementing regular purple team exercises, establishing regular threat detection operations, and running regular IR focused tabletop exercisesImplemented a 3rd party vulnerability management program to drive down enterprise risk and advance the maturity of the Threat and Vulnerability Management program

Manage a team to find and assess vulnerabilities for entire enterprise via Qualys platformManage a team responsible for Application Security services, including SAST and DAST servicesManagement and execution of separation/disentanglement projects related to Refintiv divestiture

Responsible for projects in the Security Operations Center ranging from new product evaluations, implementation, incident response support and other activitiesWorked through the global implementation of the first wave of FireEye PX deploymentsWorked in tandem with external pen-test team and Legal Information Security group to assist in a high-priority assessment and critical finding remediation against a product to secure additional revenueSetup initial scope and planning for EVM, AppSec, SIEM, and SOC separation activities related to Refinitiv divestiture

Responsible for Managed PKI Environment, Review of Network Vulnerabilities and Firewall Exceptions, Enterprise Wide Security Initiatives, and Ad Hoc Security ConsultingDesigned the update deployment plan for the relaunch of SolarWinds Patch Manager for 3rd Party ApplicationsLead Security Architect for enterprise-level divestiture project (Clarivate)Designed and architected FireEye PX deployment in cooperation with the Security Operations group

Responsible for Data Center Infrastructure Security Projects, Technical Security Consulting, Enterprise Security Pilots, and Ad Hoc Security Consulting- Executed a proof of concept of Hexis Hawkeye G integrated cyber defense platform- Implemented Vormetric Transparent Data Encryption as a service for internal customers- Created workflow for Proofpoint Targeted Attack Protection- Executed pilot of Symantec Data Loss Prevention with 3rd Party Provider

Responsible for Proof of Concept Evaluations, Security Project Execution, Technical Security Consulting for Mergers/Acquisitions/Divestitures, and Operational Security Assurance.- Executed evaluation of network assessment/scanning tool IPSonar- Executed implementation of Splunk for Enterprise Security (SIEM)

Responsible for Forensic Investigations, Incident Management, and Operational Security activities.- Managed incidents including DDoS attack mitigation, SQL injection remediation, and responded to phishing attempts- Lead forensic investigations- Deployed various security systems and proof of concept projects

Responsible for Unix Server Support (Linux, AIX, Solaris), On-Call Support, and Project Management- Assisted in planning, execution, and problem management for standard power maintenance activities and procedures- Planned and executed wide-scale critical server upgrades- Planned Data Center migration

Responsible for Level II Apple (Mac) and Windows desktop support- Responsible for handling support issues within appropriate time frames- Planned and executed training PC replacement project- Assisted senior executives in migration from US-based business locations to Europe-based business locations