Jason Larkin Email & Phone Number

Rochester, Gb

Rockville, Maryland, Us

Instructor for SEC488 Cloud Security Essentials.https://www.sans.org/profiles/jason-larkin/

London, England, Gb

A cloud first HSBC fintech.Develop and maintain security architecture capability from design and implement of security architecture models including patterns, policies, and frameworks. Assess and address gaps with control enhancements. Collaborate with business risk and control teams to resolve internal and external auditing issues. Secure the CI/CD pipeline. Review security findings from SAST and DAST scans. Drive up the compliance position against NIST, ISO27001, and GDPR. Conduct regular threat modelling.

London, Gb

Led 12 security architects across projects from IoT to Public Cloud migrations (Azure and GCP). Threat of redundancy after successfully completing my probation triggered an early move.

London, Gb

Led 15 staff in the Cyber Technology team, consisting of Cyber Defence Operations, Engineering, and Architecture sub-teams.Managed the Bank's Operations function 24/7, overseeing daily activities relating to incidents, data loss, threat intelligence, and vulnerability analysis. Optimised playbooks and runbooks to improve the speed of execution and outcome.Directed the engineering team in managing and maintaining cyber technologies such as SIEM, EDR, WAF, PAM, CSPM, CASB etc. Enhancing detection engineering informed by threat intelligence and industry frameworks such as Mitre ATT&CK and supporting broader Technology team activities.Les Security Architects in developing, implementing, and managing cyber technology roadmap to respond to emerging business strategies, technology trends, and security incidents in close collaboration with Bank stakeholders. Defended business 'red lines' to ensure solutions are implemented within an acceptable risk envelope or surfaced to risk forums and committees for consideration if appropriate.

London, Gb

Led a team of 6 Architects and Engineers.Directed the engineering team in managing and maintaining cyber technologies such as SIEM, EDR, WAF, PAM etc. Enhancing detection engineering informed by threat intelligence and industry frameworks such as Mitre ATT&CK and supporting broader Technology team activities.Led Security Architects in developing, implementing, and managing cyber technology roadmap to respond to emerging business strategies, technology trends, and security incidents in close collaboration with bank stakeholders.Identified and addressed security control gaps through design workshops or designs with other domain architects. Leveraged best practices from industry frameworks such as NIST, OWASP, CSA CCM etc.

London, Gb

Established the Security Architecture function, closing the gap between IT architecture and cyber security teams.Developed, implemented, and managed cyber technology roadmap to respond to emerging business strategies, technology trends, and security incidents in close collaboration with bank stakeholders. The key driver of the roadmap was to remove point solutions in favour of strategically aligned technology with tightly coupled integrations.Designed and oversaw technical delivery of a new SIEM & SOAR platform, endpoint security controls, Identity governance platform etc.Identified and addressed security control gaps through design workshops or designs with other domain architects. Leveraged best practices from industry frameworks such as NIST, OWASP, CSA CCM etc.Elevated the profile and awareness of security across the Group technology staff, from analysts to enterprise architects.Created a library of technical policies, standards, patterns, and security configurations covering a spectrum of client, server, application, and public cloud technologies.

Stockport, England, Gb

Established a Cyber Security function in a greenfield NHS organisation. Secured funding to build a Security Operations team.Developed, implemented, and managed cyber technology roadmap to respond to emerging business strategies, technology trends, and security incidents in close collaboration with bank stakeholders. The key driver of the roadmap was to remove point solutions in favour of strategically aligned technology with tightly coupled integrations. Implemented CIS Top 20 Critical Security Controls and achieved double-digit percentage improvements in security control effectiveness yearly. Rapid progress in overall security posture led the organisation to resist the WannaCry outbreak that spread over the National NHS Network. As a result, the team supported the broader incident response effort with other NHS organisations.Conducted and managed vulnerability assessments and penetration tests.Designed and implemented security-focused hybrid cloud infrastructure (IDS/IPS, Firewalls, Endpoint Protection, SIEM, Monitoring, Content Security, Identity Access Management)Designed several secure configuration baselines for the various platforms in use, leveraging CIS benchmarks where practical.

Edinburgh, Scotland, Gb

Designed and implemented Microsoft Azure and Office 365 core services. Designed and implemented federation services to support SAML and WS-Fed based, SSO, AD-integrated authentication. Designed and implemented a secure client operating system based on the CIS benchmark, anti-exploit toolsets, and advanced audit software. Designed and implemented a global patch management solution encompassing the technology, policies, processes, and procedures to support effective enterprise-scale patch and vulnerability management. Designed and implemented a global two-tier PKI to allow the company to deploy certificates to users and computers, internal web apps, and additional services to validate identity and enable strong end to end encryption.Designed and implemented a secure remote access solution using multi-factor authentication. Designed and implemented regional event log collectors. Windows-based computers forwarded suspicious events for ingestion into a SIEM for analysis.

London, England, Gb

Technical design authority for all Microsoft\​VMware based infrastructure solutions with responsibility for designing, deploying, and testing technical solutions to meet business needs.Key Projects/Successes• Technical design of new international branch office IT Infrastructure.• Implementation lead of a new international branch office in central Hong Kong. • Technical design and implementation lead of Microsoft Windows 2012 R2 O/S. • Technical lead of new Microsoft System Center 2012 which included SCCM, SCOM, and Orchestrator.• Technical design and implementation lead of Microsoft Exchange 2013.

London, England, Gb

This role was aimed at delivering infrastructure change into Jupiter. The varied role covered infrastructure solution design and implementation, root cause analysis and resolution, and general technology innovation.Key Projects/Successes• Technical design and implementation lead of Microsoft Exchange 2010 migration project. • Technical design and implementation lead of Mimecast message hygiene and cloud archive service from onsite Symantec Enterprise Vault (EV) 9.• Technical design and implementation lead of Microsoft Active Directory Read-Only Domain Controllers. • Technical design and implementation lead of Microsoft Active Directory Certificate Services (PKI). • Technical design of Microsoft Lync 2013. • Provided 4th line support to IT Operations.• Technical design and implementation lead on the second phase of a Microsoft Platform Upgrade Programme.

epitomii Limited approached me directly for this role which was created in whilst forming the company in late 2011. The role was to drive forward solution design and bring depth and breadth of IT skills to earn the confidence of customers in the Channel Islands. Key Projects/Successes• Windows 7 Upgrade. Provided Microsoft Windows 7, Microsoft Office 2010, Microsoft SCCM 2012, and Microsoft App-V infrastructure deployment guidance to the States of Jersey for a 7,000 seat migration.• Active Directory 2008 R2 design review and health check for a number of large global financial companies.• Active Directory 2008 R2 design and deployment for a channel island based investment company.

London, England, Gb

This temporary role was created to lead a large refresh of the company’s client computing estate. In scope was the deployment of the O/S and applications, deployment infrastructure, complete hardware refresh all for client computers, application testing and remediation. The project had a total budget of £1 million and a timescale of 9 months. The project was completed 10% under budget and 3 weeks ahead of schedule.Key Successes• Technical design and implementation lead of Microsoft SCCM 2007 infrastructure.• Evaluated a number of desktops and laptops from different vendors. • Technical design and implementation lead on a Microsoft Windows 7 migration project. • Tested and remediated if necessary over 400 applications.

London, England, Gb

I managed a technical team of up to five staff in an ITIL structured environment across multiple sites (London, Kent and Bermuda).Main responsibilities during this time were...• Act as a senior point of contact between IT and the business in the Kent office (~250 users).• Produce monthly KPI reports and hold IT Operations meetings with business stakeholders.• Drive continuous service improvements.• Provide support for IT Infrastructure, IT Strategy, and IT Service Desk functions.• Remain a hands-on technical lead, whilst also managing a team (60/40).• Maintain a reliable, secure and highly available IT infrastructure.

London, England, Gb

I primarily supported all Wintel infrastructure on HP Proliant hardware across multiple sites, and dealing with escalation from the IT Service Desk.

London, England, Gb

Primarily providing desktop support to Windows NT\2000 desktop estate and Novell\Microsoft server infrastructure.

London, England, Gb

Primarily providing desktop support to Windows 2000 desktop estate and Novell\Microsoft server infrastructure.

Primarily providing desktop support to Windows NT desktop estate and performing simple admin tasks in NDS, GroupWise and ZenWorks.