Information Security professional with 7+ years of industry experience and a M.S. in Cyber/Computer Intelligence and Counterterrorism. How I have empowered growing organizations to achieve results while scaling security practices to meet constantly increasing risk:Identifying and documenting risk• Applying common tactics, techniques, and procedures (TTP) to identify vulnerabilities in organizations• Performing frequent and comprehensive security audits and recording results• Using MITRE ATT&CK framework to perform enterprise threat modelingAnalyzing risk• Writing Business Cost Analyses (BCA) to determine which new tools and processes to implement for risk reduction• Quantifying risk through the use of Annual Loss Expectancy (ALE) and using the results to determine whether to accept or notMitigating risk• Educating the team by building custom security training modules and demonstrating best practices• Writing Incident Response Plans (IRP)• Automating alerts to improve incident response times• Bringing widely-used frameworks such as NIST, ISO and COBIT to organizations