Jay Deming Email & Phone Number

Garner, Nc, Us

Garner, Nc, Us

•Managed NCDOT Threat and Vulnerability Management program.•Developed processes and procedures to ensure compliance requirements for PCI-DSS.•In-depth understanding of cardholder data flow, compensating controls, intent of the PCI-DSS requirements, and experience undergoing several PCI-DSS audits.•Developed comprehensive approach to identify the location of credit card numbers and other sensitive data in workstations and servers.•Developed and maintained Security Information Event Management (SIEM) reports, custom alerts, correlations, and tuning.•Performed Guardium data purges, S-TAP tuning, policy tuning based on user activity and privilege escalation •Reviewed daily PCI-DSS SIEM reports verifying network traffic and access to critical applications and devices.•Performed Enterprise Network, Database and Application Vulnerability Assessments.•Identified, gathered and submitted evidence for annual PCI audit.•Monitored and investigated Security Information Event Management (SIEM) alerts critical to maintaining NCDOT PCI-DSS compliance.•Streamlined PCI-DSS site validation process for new and existing sites.•Attended daily operations calls providing threat analysis on new exploits and malware activity.•Guided customers and IT support staff on security procedures and threat management through security awareness and briefings.•Consulted on project requirements to identify system weaknesses and enforce security controls.•Managed and maintained over 260 Intrusion Prevention System (IPS) appliances deployed throughout the state.•Developed and maintained information security standards using best practices and third-party guidelines (NIST, USGCB, CIS, Microsoft, PCI-DSS, HIPAA, CJIS and ISO 27009).•Analyzed emerging threats using the Common Vulnerability Scoring System (CVSS).•Investigated and reported all Information Security Incident handling within with required timeframe. •Managed and maintained Incident Response Plan.

Falls Church, Va, Us

•Performed Security Vulnerability Assessments on USPS IT/Engineering equipment both local and national.•Managed and created Oracle, Sql, and Access databases for data collection and analysis.•Created detailed on-demand reports that provided trend analysis on USPS sensitive data using Crystal Reports.•Reviewed and instituted policies to ensure FISMA and NIST compliance. •Developed corporate information security policies and guidelines.•Researched and tested third party software (COTS) for compliance and provided recommendation of corporate use.•Selected over peers to conduct the largest security assessment performed by the USPS resulting in over 10,000 network devices evaluated.•Organized and conducted the largest modem vulnerability assessment within the USPS resulting in 175,000 phone numbers assessed for possible unprotected modems.•Created high-level information security presentations for security awareness and prevention.

Randolph Afb, Tx, Us

Randolph Afb, Tx, Us