James Carmichael Email & Phone Number

St Petersburg, Florida, Us

Solana Beach, California, Us

Created cybersecurity documentation for clients on an enterprise level (DR, BCP, Access Control, Data Classification, etc.) ● Reviewed client product cybersecurity for design, connectivity, and compliance purposes resulting in alignment with global healthcare and privacy standards ● Perform risk assessments against CIS, NIST benchmarks for Azure and 0365 ● Performed network assessment and application discovery of a legacy system including vulnerable protocols, outdated OS, poorly configured API, and SDLC improvements ● Performed a risk assessment for a mining and previous materials company including o Network design assessment o IT and OT monitoring solutions research and implementation o Endpoint security assessments such as outdated OS, patching, application CVS research o Interviews with staff regarding DR, upgrades and pathing, an OT network architecture o Redesigning and reassessing risks regarding air-gap segmentation at mining facilities

Performed several cyber security assessments for energy clients through interview and analysis of current state capabilities utilizing NIST 800, ISO 27000 and other custom frameworks including white box testing and analysis.Performed multiple operation technology assessments for clients in energy, utility, and manufacturing sectors; assessed configuration of control workstations and systems to identify risks with network segregation, wireless network security, data storage, and authentication.Led overall cyber security assessment, based on ISO 27002, of 10 manufacturing plants (2 in America, 8 in southeast Asia) to determine security risks in the client’s facility network architecture (firewall and switch configuration review), application implementation and development, physical security, authentication and authorization mechanisms, asset management, policies and process flows.Performed an Industrial Controls security assessment aboard an offshore oil platform for a global E&P company; this included wireless sweeps, physical security observations, network and firewall security testing, and an assessment of the production PLCs and workstations, as well as software version analysis on SCADA and ICS systems. Conducted manufacturing plant security review for a client which included 10 sites, all with varying risks. This included software version analysis for existing vulnerabilities in Hmi/SCADA software, network architecture review, and network traffic pattern analysis to determine operational technologies risk. Other factors which were considered were password management, USB enabled devices connecting to manufacturing computers, and wireless security.

Gb

Dallas, Texas, Us

Collaborate in the architecture and design of multiple applications; make recommendations for enhancements to efficiency, reliability, and securityContribute security and compliance requirements to project meetings throughout the SDLC leveraging the secure by design principlePerform penetration testing on internal hosts and networks using several vulnerability scanning tools such as Metasploit, Nikto, Burp, and nmapExecute vulnerability scans using Rapid7, Nessus, Qualys, document assessments on all new internal applicationsConduct security code reviews, both automated and manual, of multiple platforms including .NET, C#, Java, and AS400 (iSeries) code for all projects and day-to-day operations/changes identifying vulnerabilities such as SQL injection, XSS, race conditions, etcMonitor and configure DLP solutions for PCI, HIPAA, and privacy dataDevelop and host educational sessions on topics ranging from privacy and data security to secure application development Support efforts to operate, maintain, and dispose of information system materials in accordance with InfoSec policyDocument and maintain InfoSec policyResearch new/upcoming legislation to stay ahead of compliance requirementsExperience working on multiple projects simultaneously while maintaining focus on both tactical and strategic goalsWorked on multiple Point of Sale projects as well as back-end system enhancements and changesActively led the encryption enhancement for all credit card data for stronger security and better PCI ComplianceWorked as the Security and Compliance liaison for Sports Authority’s loyalty program (The League) incorporating multiple state laws and government regulations regarding privacyDelivered on time and under budget on several projects including a massive overhaul of the supply chain system consisting of multiple databases and applications resulting in a reduced on-hand inventory and more efficient delivery

Project management including deployment, budget, maintenance, and licensingDocumented use-case scenarios, architecture, limitations, deployment methodology, and all training materials for internal useNegotiated with vendor regarding training for developers, testers, and production supportCreated and maintained licenses for all users in the IT organizationConfigured Appsight software for enterprise-wide use; deployed Black Boxes for error trapping and aided in log analysisAdministered log repository, web support interface, installation functionality, and access on Windows Server 2003Trained users on Appsight Black Box software package (Dev/QA/Prod Support)Developed deployment plans and best use-case architecture based on application and team requirements (Development, TQA, and Production Support)Saved approximately 50 man-hours per week by discovering root cause on an on-going issue and aided in its resolution

Coordinated hardware and software changes in release cyclesCoordinated with Project Managers for release readinessEnforced change policy across all groupsHosted Change Control Board meeting to approve/deny upcoming changes and risk mitigation

Stephenville, Tx, Us

Troubleshot faculty and staff computers on campus running Windows 98 – XP and Macintosh systemsAdded PCs to University domain; mapped network drives and established shares/permissionsInstalled, updated and configured software as requested: anti-spyware, anti-virus, SPSS, Hummingbird, SAS, Office 2003(Word, Excel, Access, Powerpoint), Windows XPClient side network troubleshooting using Link Runner equipmentTroubleshot/configured ODBC drivers, Oracle, and Access for use with online databasesTrained faculty and staff on use of various software features in MS Office (Word, Excel, Access, Outlook)Upgraded/updated software and hardware on faculty/staff computersUtilized Ghost to create and replicate a universal PC image used campus wide

Stephenville, Tx, Us

Returned to school to complete BS in Computer Information Systems

Audited and maintained electronic parts inventoryWrote schedules and maintained labor budgetTroubleshot electronic equipment at both board and component level, including monitor repairDeveloped and implemented training program for staff techniciansEnforced accountability and strove for improvement and excellence in all aspects of workResearched alternative parts suppliers for better prices and availability; discovered a part for 1/10th cost from an alternative vendorTrained and promoted replacement Assistant Amusement Manager of Westmintser, COEnforced HR/Company policies regarding individual/team behavior and morale