Jason Lazerus Email & Phone Number

Boston, Massachusetts, Us

Boston, Massachusetts, Us

Boston, Massachusetts, Us

Management DutiesManages high-performing cyber security professionals in Incident Response, Information Assurance, Security Engineering and Identity and Access Management.Meets with auditors regularly to ensure compliance with regulations and internal policies.Manages security budget.Evaluates and purchases products and services to meet security goals.Drives security initiatives, leads projects, and improves processes.Meeting regularly with team members one-on-one to share and receive feedback and job-related tasks to improve on professional development.Perform annual performance assessments for direct reports.Defines training plans for direct reports.Provides weekly status updates to management regarding projects/issues.Meets with other teams to discuss technology related issues and for project planning.Manages vendor relationships.Manages hardware and virtual assets.Identifies and escalates both isolated and systemic technology issues.Tunes and configures security tools to maximize the effectiveness of time and detection of incidents.Conducts periodic lunch and learn training sessions.Technical DutiesManages SailPoint IDN Build Team. Current project ongoing to implement SailPoint IDN.Manages Public Key Infrastructure.Configures Azure SSO for SAML authentication.Responds to cyber security incidents.Writes scripts in PowerShell and Python to improve efficiency and manipulate data.Creates Splunk queries, alerts and dashboards

Boston, Massachusetts, Us

Managed a team of three high-performing cyber security professionals.Met with auditors regularly to ensure compliance with regulations and internal policies.Evaluates and purchases products and services to meet security goals.Drives security initiatives, leads projects, and improves processes.Meeting regularly with team members one-on-one to share and receive feedback and job-related tasks to improve on professional development.Perform annual performance assessments for direct reports.Defines training plans for direct reports.Provides weekly status updates to management regarding projects/issues.Meets with other teams to discuss technology related issues and for project planning.

Boston, Massachusetts, Us

Boston, Massachusetts, Us

• Responsible for the vulnerability management program. Researches vulnerabilities and works with vendors and system owners on mitigation and patching.• Creates and monitors benchmarks for operating systems and applications to ensure a minimum standard is met. • Provide recommendations on security controls to improve the organizations security infrastructure. • Created digital forensics program and works with various departments during incidents to fulfill requirements. • Created penetration testing program and utilizing tools such as Kali, Metasploit, and Burp Suite, performs testing on a regular basis. • Serves as the liaison between Technology and internal and external auditors to ensure compliance with policies and regulators. Coordinates efforts to remediate findings.• Leads cyber security metrics meeting where trends are monitored and security issues are discussed. Automated the collection and improved the quality of metrics data. • Leads change control team. Developed system to improve the efficiency of the change control program. • Responds to cyber security incidents and works with team members to investigate and remediate alerts. • Mentors coworkers on various cyber security topics and tasks. • Reviews security exceptions and evaluates acceptability based on risk.

Stony Brook, Ny, Us

A center of academic excellence and an internationally recognized research institution that offers all students a world-class education. • Responsible for vulnerability management program. Researched vulnerabilities and work with vendors and system owners on mitigation and patching. • Created information security documentation including incident response plans and disaster recovery plans. • Monitored firewall and SIEM logs and responded to incidents. • Provided input on security controls to prevent attacks from infiltrating or jeopardizing company and student information. • Specialized in implementing systems such as intrusion detection, asset management, configuration management, virtual machine management, high-end firewalls, and encryption management. • Provided domain administration and server maintenance. Built servers as needed for various purposes. • Redesigned network to provide significantly reduced attack surface.

Stony Brook, Ny, Us

A leader in patient care, research, education, and community service. • Provided first line technical support to 10k+ users. • Provided account management services including creation and password resets. • Served as the primary technical contact and assisted vendor in developing and deploying single sign-on solution. • Moderated and sent broadcast emails on a regular basis to hospital employees. • Redesigned Information Technology website using HTML and CSS. • CA Unicenter ServiceDesk Administrator.

Master Of Science (Ms), Digital Forensics

B.S., Information Systems Security

A.A.S., Information Technology