Joe Weiss, Cissp, Csm, Itil Email & Phone Number

Columbia, Md, Us

An expert in enterprise-level Security Information Management Technology who is enthusiastic about vulnerability management, network security monitoring and security operations. Subject Matter Expert using data visualization tools to support Cyber Exposure utilizing Tenable.io and Tenable.sc. Experienced and published author, content creator, and blogger for various videos, blogs, dashboards and whitepapers; across a wide variety of digital formats within the InfoSec community. Experienced researcher of topical business initiatives and drivers, such as regulations and standards. I understand vulnerability management.Specific responsibilities include the following:• Maintain hands-on experience with the entire Tenable product line and provide technical expertise and support on integration of Tenable products in an enterprise environment• Work with Tenable senior management on new ideas and initiatives to better serve our customers, provide input for development of useful product features and requirements, and analyze new initiatives by Tenable’s research team and develop relevant content on their application• Monitor security discussion lists and summarize pertinent issues for Tenable’s Research and Management teams. Create and post to the Discussions Forum Tenable.io and Tenable.sc content. Research and develop technical papers, discussion posts and blog posts on topical applications of Tenable products.

Worldwide, Oo

A technically savvy leader that is passionate about managing risk. Responsibilities include protecting the Deloitte brand and providing a consistent approach to application security, risk identification and mitigation. This includes developing frameworks for technology teams to help them understand and navigate through all risks, which include Cyber, Technology and Infrastructure, Office of Confidentiality and Privacy and Office of General Counsel. And to provide expert guidance navigating across all areas of risk including regulatory requirements, data security, confidentiality and privacy for all applications including cloud, on premise, and vendor applications.

Columbia, Md, Us

Research topical business initiatives and drivers, such as regulations and standards, and document methodologies to address the requirements. Provided technical expertise on integration of Tenable products in enterprise environments. Serve as a liaison with select Tenable customers, Research and develop technical papers, discussions and blogs on topical applications of Tenable products. Rapidly respond to zero day and other malware providing tools that assist customers in identifying and mitigating emerging threats, usually within hours. Scrum Master, familiar with working in Scrum and Kanban process frameworks within an Agile environment.

Toledo, Ohio, Us

Principally responsible for the architecture and operation a SOC environment that ensured the confidentiality, integrity, and availability of enterprise computer systems, data, and network resources; working with both internal and external teams in an effort to validate that both new and existing architectures and applications are developed and deployed in a secure manner. Create and manage a secure computing environment through the implementation of security standards for systems and applications, as well as security policies and guidelines. As well as handle the security of more complex environments, architectures and applications. Ownership of enterprise configurations for all data center and core devices as well as primary responsibilities for all aspects of boundary defenses, application software security, continuous vulnerability scanning and penetration testing. In-direct and overlapping responsibility in the areas of data loss protection, wireless device control, monitoring and analysis, secure engineering, incident response and data recovery.

Toledo, Ohio, Us

Identify the need for new security technology solutions; design, review and collaborate on the deployment of new solutions with teams throughout the organization. Contribute to the development and implementation of security technology solutions for complicated and more complex environments and architecture. Conduct request for information/request for proposal (RFI/RFP) and vendor selection and leads the technical design of the deployment. Act as a subject matter expert on the implementation and capabilities of all existing security controls within HCR-Manorcare, particularly in the case of complex and complicated security issues. Develop baseline system and application hardening guides based on industry best practice and provides assistance to IT teams on current security solutions and configurations. Conduct system architecture reviews for new technology to ensure best practices, document security solutions, and enable re-use of processes. Work with Operations to implement new technologies and security solutions in alignment with industry best practice and commonly accepted principles of secure design. Provides emergency support to Security Operations for escalated issues in regards to VPN technologies.

Boulder, Colorado, Us

Duties include performing system audits and examine configuration of UNIX and Windows servers to insure CIS compliance using Nessus Security Scanner and WebInspect. Create and modify audit files to match CIS benchmarks set forth by UMS. Manage data encryption and physical security devices. Identify and implement technical modifications to insure CIS compliance. Provide formal guidance and recommendations to Organizational Heads on IT Security best practices. Architect and implement a secure cryptographic environment for access control for University Information Systems. Worked with securing Oracle database implementations and log management and review. Design Develop and Implement a complete secure desktop consolidation and migration to VMware View.

Sworn Officer for the Gilmer County Sheriff Department.

Full time Firefighter/EMT with the rank of Lieutenant for Gilmer County Fire Rescue and all the associated duties. Firefighter/EMT with the rank of Captain for volunteer fire station #7 with the full responsibility to operate and maintain that station/apparatus and firefighter safety. Nationally Certified NPQ-1, EMT-I

Oversee all investigations and act as lead investigator for all cases. Principle Forensic Investigator for all computer crime investigations. Principal Investigator for information security audits and penetration testing. State Licensed and Certified. Armed/Concealed State License.

Atlanta, Georgia , Us

One of the key researchers of the Public Key Infrastructure Laboratory at the Georgia Tech Research Institute. Worked heavily with a variety of encryption software/hardware, including implementation of the same. Responsible for all Information Security concerns for the Criminal Information Sharing Alliance, as well as SOC development. Implemented Secure Firewall and Router designs/changes, created policy, designed and implemented network topology changes, hardened servers to Government CIS Standards. Worked with many Government Agencies in the area of Information Security. Strong knowledge of Solaris, Linux and Windows Servers and Workstations, Oracle and NGS. In depth knowledge and daily use of sniffers and LAN analyzers on networks to perform security evaluations on hosts and databases. Ensured that key equipment was protected from outside attackers and met CIS Standards and expected benchmarks. Provided guidance and recommendations on risk management, systems and database configurations as pertains to NIST 800 guidelines (ISO 17799 and 27001) to protect assets.

Dallas, Tx, Us

Manager of Unix IT Operations Group (BellSouth/ATT SOC) and all day to day activities of that team and Principle Security Person for both Information and Physical Security for BellSouth Business Systems across the entire 9 state operating region. Designed and implemented secure firewall changes, created policy, installed security hardware and software. Performs information and physical security audits across the nine state operating region. Provided Executive Officers and Management with guidance and recommendations on risk management, physical information and database security. Supported architectural engineers and end users (Tier 1-3) with information to safeguard information to protect the organization. Familiar with security best practices NIST 800 and ISO 17799 and 27001 and 27002. DoD NSA/NCSC Rainbow books. Daily use of security evaluation tools for hosts and databases.

Designed and implemented a successful Internet Service Provider with locations in two states and 1000’s of subscribers. Responsible for all the day to day duties and operations of all clients/servers. Was instrumental in bringing to light in the public view security concerns with other ISP’s. Was published on information security views in newspapers and media. Noted as being the most secure ISP in Montgomery Alabama by Montgomery Newspapers and the ISP to maintain a security operations center (SOC) onsite. Implemented strict measures to secure private data. Implemented secure internet communications, secure web communications and secure packet transfers. Familiar with testing and change control, system monitoring and tuning for development and production environments. Key Contributions: First ISP to implement any form of Secure Data Transfers and Secure Email. Recognized for outstanding quality of customer service and technological advancement by theCity Montgomery. First ISP in the City to provide private Internet High Speed Connectivity to GovernmentContractors. First ISP in the City to provide high speed connectivity to clients (64K to T1) First ISP to provide Internet Connectivity to State, County and City Agencies. First ISP to provide the availability of ISDN services for voice and data.

Designed and implemented a network infrastructure and data center to support the operations of an full service Internet Service Provider. Was the first internet service in the State of Alabama to provide ISDN services as a reseller to customers and the first to implement any security features on web or email for customers, as reported by the Montgomery Newspaper.