Penetration Testing as a Service | Attack Surface Management | Breach & Attack Simulation

Owner and principal for Devinion, a cybersecurity consulting firm enabling local small and medium businesses to achieve desirable outcomes by implementing bespoke solutions for information security and compliance. Architected solutions for businesses to improve security posture by implementing technical, operational, and managerial controls according to business needs and appropriate risk management. Implemented cloud-first technology patterns to migrate on-premises systems to AWS and Azure workloads to improve performance, reliability, and security. Managed federated authentication systems to enable single sign-on and multifactor authentication. • Implemented and managed technical controls such as firewalls, web application firewalls, cloud access security brokers, endpoint protection, mobile device management, and secure access service edge devices. • Produced artifacts for implementing a secure business environment including policies, guidelines, and standard operating procedures utilizing security frameworks such as NIST Cyber Security Framework and CIS Critical Security Controls.• Developed business strategies with executives of consulting companies to implement security as a core business process.• Developed custom software to integrate with APIs for automation and information aggregation to provide business intelligence using Python, Go, and PowerShell.• Performed external and internal vulnerability assessments and basic penetration tests using common open source and commercial tools.• Provided initial incident response and manage customer business continuity and disaster recovery scenarios.• Provided in-person and virtual training sessions and implemented training programs.

Cyber security technical subject matter expert and security evangelist for a multi-national systems integrator on the cyber security professional services team. Provided nation-wide pre-sales technical security support for enterprise, SMB, and State, Local, and Education (SLED) clients. Developed requirements, statements of work, and bills of material to enable professional services delivery in support of client cyber security initiatives. Engaged in remote technical support for cloud and on-premises security infrastructure to deliver exceptional outcomes. Demonstrated excellence in providing leadership and coordination with client IT departments, vendors, and internal multi-practice resources to deliver desired outcomes on complex solutions

Responsible for implementing and managing the information technology and security program including multi-site secure information delivery, data loss prevention, endpoint security, Linux and Windows Server hardening, endpoint detection and response, mobile device management, and secure network infrastructure. Developed policies and standard operating procedures for the enterprise to ensure compliance with US Department of Energy Controlled Unclassified Information orders by implementing and documenting NIST SP 800-171a controls utilizing a risk-based approach.• Implemented a secure virtual desktop infrastructure (VDI) deployment using VMware vSphere on-premises and Citrix Virtual Apps and Desktops to support more than 100 geographically dispersed end users. Extended the on-premises installation into Microsoft Azure cloud and Citrix cloud using SD-WAN and Citrix Application Delivery Controller (ADC).• Managed Microsoft Active Directory Federation Services to provide multifactor authentication and single sign-on to SaaS applications.• Managed the Avaya Voice over IP services for more than 80 endpoints.• Managed desktop and end-user support, including remote workers, infrastructure, and transient workforce on-site mobilization and demobilization.• Provided custom software programming to integrate discrete systems and provide automation using C#, Python, and PowerShell.• Performed vulnerability scanning and management, documented risks and worked with corporate stakeholders on budgeting and projects to implement a more secure business posture.

Provided contract compliance and program management for cyber security and information protection and assurance. Served as a chief technical subject matter expert in the CIO’s office. Acted as a liaison between the CIO’s office and contractors providing technical resources and support. • Led a multi-contractor effort to redesign the Hanford site information clearance process to expedite the flow of non-sensitive information to Hanford site stakeholders.• Handled sensitive investigations regarding acceptable use of resources, working intimately and discretely with legal and HR resources.• Wrote and managed procedures, policies, and guidelines for implementing information security in accordance with US Department of Energy Controlled Unclassified Information orders. • Managed technical projects and provided technical support to ensure compliant controls were implemented in both information technology and operational technology networks.

Served as the project manager and senior programmer for deployment of the Advanced Hydrological Prediction Service (AHPS) for the National Weather Service (NWS). This involves developing software and processes to aggregate data from multiple independent sources, such as the National Oceanic and Atmospheric Administration (NOAA) and the United States Geological Survey (USGS). • Provided custom programming in Perl, C++, PHP, and MySQL on Linux environments. • Acted as lead web programmer for AHPS and Climate web sites at www.weather.gov/ahps and www.weather.gov/climate as well as a configuration management web application to manage all metadata throughout the NWS enterprise.• Extensively involved in managing, designing, configuring, and installing three server farms to processes the data and present the data through a geographically redundant PHP website.

Served as a technical lead and principal software architect for web-based software application solutions using Java, Adobe ColdFusion, and .Net languages. Delivered desktop client-based software applications using C# and VB.net. Demonstrated expert level understanding of Microsoft SQL server by designing and implementing transactional programming using well-normalized and optimized relational databases. Acted as subject matter expert on web technologies for the web development group and provided expertise with infrastructure management to integrate into a DevOps organization.• Served as principal architect for a custom-developed content management system deployed across the Lockheed Martin managed contracts.• Provided on-site installation and training for bespoke developed software.• Participated in all stages of a secure software development lifecycle and assisted Lockheed Martin Information Technology line of business achieve a CMMI Level 5 rating.• Principal involved in developing a source control program utilizing Subversion.• As a technical lead and advocate, I helped develop a program to migrate software development to a DevOps model using Linux-based VMs.• Senior level programmer using Java, Adobe ColdFusion, C#, and Microsoft SQL.

Supported engineering and production by building PCs, providing help desk support and telecommunications.