Managed a Team of Security analysts and engineers, Developed reporting standards, dashboards and alerting for Security Operations Center Lead vulnerability management project, including tool evaluation and implementation.Point of contact for security to internal and external groups. Provided security architecture review,and consultation for internal projects.

Lead engineer for Multiple Security Products: SEIM (enVision), two-factor authentication(securID) and encryption (PGP Universal), anti-virus solution(Symantec)Scanning, vulnerability testing, penetration testing: primary engineer (CoreImpact, Nessus, open-source tools)Corporate encryption owner (PGP file, disk, email)CERT and disaster recovery team memberPerformed internal audit and remediation efforts for PCI (Payment Card Industry standard) compliance.Developed and Implemented security policies, processes, standards, procedures and guidelines.Provided training to developers and other staff on security issues.

Performed audit of client environment with regards to PCI (Payment Card Industry standards)Researched programs and implementation complianceDeveloped and analyzed Business intelligence regarding use and development of applicationsPerformed security analysis on application, firewall etc, development practices and standardsAssisted with vulnerability scans and reportingPresented secure coding practices to development teamsRecommended improvements

Recommended policy change that saved company >$100,000Analyst responsible for 20 sites in Washington and Oregon and 700 users.Handled installation and troubleshooting of CISCO routers and wireless devices. Managed installations and troubleshooting of VPN connections (Nortel/RSA) Security designate for incident response (CIRT). Managed active directory of group policies and OU including definition and implementation. Troubleshooting Windows 2000/2003 servers. Installed, refreshed and troubleshooting 300 computers, 200 printers and network devices. Network end-to-end troubleshooting using a number of tools including: ethereal (wireshark), snort, snmpc. Wrote Perl and VB scripts to automate tasks. 2nd-tier software and hardware support for users, frequently dealing with people with diverse including non-technical backgrounds,. Initiated several security projects including one to properly define and delineate file access on the server. Managed VOIP system(Toshiba).