■ Serve and lead an incredible team of world class cybersecurity consultants. We make a difference by strengthening and enhancing security capabilities for our clients. The services we provide include security architecture and design, assessments and testing, IT/OT SOC integration, and LiveFire threat emulation. ■ Acquired by Accenture in April 2020

■ Sr. Manager, Vulnerability Assessment & Penetration Testing Services (January 2016-December 2016)▪ Built and led a team of over 25 cybersecurity consultants ▪ Served global 1000 clients providing vulnerability assessment and penetration testing services across IT and OT/ICS▪ Created and managed service offerings to meet client needs and help enable their core mission/business in oil and gas, electric utilities, automotive manufacturing, petrochemical, and other industries■ Principal Security Consultant (July 2014-January 2016)▪ Served as solution owner for OT/ICS consulting services including embedded device testing, SCADA and DCS assessments, and strategic consulting for addressing ICS security▪ Led client engagements, including global, multi-year vulnerability assessment and penetration testing efforts■ Sr. Security Consultant (January 2011-July 2014)▪ Helped expand OT/ICS and enterprise IT service offerings▪ Co-creator of an Intelligence Driven Defense assessment framework and assessment service

■ Conducted security assessments, penetration tests, NERC CIP cyber vulnerability assessments, and other security consulting services for leading utility companies; Performed assessments of SCADA, DCS, AMI, Smart Meters, Electric Vehicle (EV), and Home Area Network (HAN) systems; Scoped and managed projects, led on-site assessment teams, performed technical assessment, developed assessment tools and methodologies, authored and delivered reports, gave executive and technical briefings.■ Technical lead and primary developer for Bandolier, a Digital Bond research project for the US Department of Energy. Worked with vendors and asset owners to identify optimal security configurations for control system applications. As a result of this work with Bandolier, thousands of security settings buried in the applications and operating systems are now- catalogued and measurable using the Bandolier security audit files. Bandolier, in conjunction with the Nessus policy compliance plugins, became the most widely deployed security assessment tool in the control system space.■ Frequent speaker at ICS security events and regular contributor to the Digital Bond blog.

■ ICS Security Liaison - Implemented security technology and processes for multiple control systems in electric, water, and natural gas utility operations; Established functional, collaborative relationships between IT and operations personnel; Performed security assessments, recommended and implemented technical and administrative controls to improve security for ICS networks.■ NERC CIP Technical Lead - Helped guide NERC CIP compliance efforts; Advised senior managers on compliance issues; Created processes and automated tools for risk-based assessment and change management; Represented City Utilities in the Southwest Power Pool (SPP) Critical Infrastructure Protection Working Group■ Security Architect - Implemented security technology and processes for encryption, VPNs, PKI, secure remote access, intrusion detection, forensics, incident response, application code migration, centralized logging, system hardening, backup and recovery, and business continuation; Managed Cisco PIX and ASA firewall infrastructure; Designed secure network architecture for Internet-facing web sites and applications.

■ Network Engineer and Systems Administrator - Designed, implemented, and maintained LAN, WAN, Firewall, and VPN technology for a metropolitan area IT and OT networks; Managed dozens of NetWare, Linux, and Windows servers in an enterprise domain environment; Responsible for server uptime, application delivery, backup and recovery, and tier-3 technical support and problem resolution.