Jeff Barone Email & Phone Number

Carlisle, Pa, Us

Harrisburg, Pa

* Perform network and web application scans against internal and external assets. * Manage quarterly scanning process for agency assets from an external unauthenticated standpoint.* Run authenticated operating systems scans as requested.* Run authenticated web application scans for new applications as part of Commonwealth CA2 SDLC process and on an ad-hoc basis when requested.* Provide false positive review, documentation and remediation recommendations to agencies.* Ensure agencies and application owners understand risk coming from vulnerabilities.* Work with external vendors for security assessments to ensure value and assist with remediation of findings* Perform security audits* Work with multi agency security and privacy committees.

Harrisburg, Pa

* Act as a virtual CISO for the 10 agencies that make up the Government Delivery Center and the PA Municipal Retirement System* Act as an agency security analyst for the Government Delivery Center agencies and ensure proper remediation is preformed on security incidents* Performs daily DLP log review for OA agency assets to ensure PHI/PII data is properly managed.* Review Internet content filter configuration and logs to ensure policies are being met and to review logs for disciplinary action* Work with multi agency security and privacy committees.* Assist the Office of Administration and agencies with PCI compliance.* Perform network and web application scans against internal and external assets. * Manage quarterly scanning process for agency assets from an external unauthenticated standpoint.* Run authenticated operating systems scans as requested.* Run authenticated web application scans for new applications as part of Commonwealth CA2 SDLC process and on an ad-hoc basis when requested.* Provide false positive review, documentation and remediation recommendations to agencies.* Ensure agencies and application owners understand risk coming from vulnerabilities.* Work with external vendors for security assessments to ensure value and assist with remediation of findings

Harrisburg, Pa

• Perform vulnerability assessments against company assets and where appropriate, perform penetration tests to determine the security posture of the asset or application• Act as a primary point of contact with third party penetration tests. Ensure tests maximize benefit to the company and minimize risk. Provide explanations and proof to asset owners regarding findings. Retest systems that have been remediated to ensure the issue has been corrected• Review previous penetration tests to ensure all issues resolved and that the company received the maximum ROI for the work• Review daily vulnerability assessment reports from multiple technologies (primarily Tripwire IP360 and Nessus) and hold meetings with team leads to discuss vulnerability impacts and remediation efforts• Submit monthly firewall and IDS and quarterly configuration management documentation to federal auditors (CMS – Center for Medicare and Medicaid Services)• Review security application logs for trends in attacks and infection• Assist with configuration management program to ensure documentation shows compliance with allrequirements or have management approved exceptions or deviations• Served as a primary point of contact for the company with external auditors (CMS 912 audit and CFO). This entailed setting up meetings, ensuring the proper staff is in attendance, providing explanations to auditors and to interviewees and educating employees on how to interact with external auditors• Work with program managers and project leads to ensure security and compliance are part of the decision making process when working with internal resources and with third party vendors• Provide security architecture recommendations for new products• Assist technical leads and management regarding interpreting compliance regulations• Serve as a project manager on projects involving security operations and audits• Technical support for security related technologies and for troubleshooting issues

• Manage security staff and contractors responsible for user management of agency users and serve as point person for PCI audits and PCI compliance• Determine budgetary needs of security team and assist agency with budgetary requirements for PCI initiatives• Set priorities and goals for the team and wrote performance evaluations for team members• Perform agency wide vulnerability assessments and patch management via Nessus, open source utilities and Backtrack Linux• Perform network and wireless network penetration tests as needed and required through open source utilities and Backtrack Linux• Serve as agency representative in the Commonwealth Security Domain team that focuses on security issues, product selection and policy review

• Responsible for PCI gap analysis and PCI quality assurance• Performed vulnerability assessments to determine patch levels of software running on agency equipment and system configuration• Perform network and wireless penetration tests as requested or required• Wrote security systems recommendations, design and implemented or helped implement the design• Installed Motorola Air Defense wireless IPS throughout agency network• Conducted router, switch, firewall, wireless access point, desktop and server configuration reviews• Implemented agency incident response due to virus, malware, or hacking issues• Authored security policies and procedures• Served as agency representative in Commonwealth Security Domain team that focuses security issues, product selection and policy review• Served as coordinator for secure web development program run by the Governor’s Office of Administration

• Managed network operations team of four representatives• Served as an agency representative on Commonwealth Security domain team that focuses on security issues, product selection and policy review• Managed and updated Nokia IP560 firewalls running Checkpoint and Cisco routers with access control lists• Administered and updated Internet content filter• Updated agency DHCP and DNS server as needed• Administered Red Hat Linux and Windows XP / Server 2003 systems• Performed agency vulnerability assessments and patch management checks via Nessus• Provided support for agency VPN users connecting to a Cisco VPN concentrator

• Managed and updated Firewall rule base and operating system administration of Nokia IP 530 firewalls running Nokia IPSO OS and Checkpoint firewall software• Managed agency Internet content filter administration by using Websense 5 and Surf Control 5• Conducted ISO 20001 based vulnerability assessments• Administered and updated Windows 2000 Server and Linux server systems• Provided support for agency VPN users connecting to a Cisco VPN concentrator• Served as disaster recovery agent for all agency information technology assets• Performed Cisco switch maintenance on networks within the Security team’s domain

• Performed maintenance of all GIS data files (geofile) and associated geography. Reviewed and implemented specifications provided by field personnel on modifications for the geofile data and geometry. ESRI ArcView 3.3 and Interact Geo 911 were the primary mapping software packages• Coordinated modifications and updates with the commercial geofile vendor• Integrated and updated new data with current data. Loaded data onto servers and workstations on CDC computers, mobile office units and PSP station desktop computers• Developed reports on problem areas within the data provided and analyze data to provide solutions• Provided data maintenance and application support for implementation and execution of the department crime mapping software, PROphesy• Assisted in the development of formal system operation and administrative policies and procedures required for the successful on going operations of the GIS system after system acceptance and release to the PSP This included items such as data maintenance, data updates, system backups, file reorganizations and disaster recovery policies and procedures• Assisted the CAD/GIS supervisor in working with the contracted system integration team responsible for the design, development, acquisition and deployment of the computer aided dispatch and geographic information systems• Assisted in the execution of system administration, hardware, software and database support, including and new future or feature updates to the GIS system• Acted as a liaison to the training team• Assisted in coordinating contracts with GIS hardware, software and related service vendors once the systems have been accepted and released to the PSP. Provided training and support for dispatch personnel who will provide on site GIS data validation assistance at each of the five consolidated dispatch centers• Monitored system performance and conducted system performance evaluations

Camp Hill, Pa

• Repaired/upgraded and installed software on computers in branch offices from Florida to New York. Systems included Windows 2000, Windows NT, and Windows 95 and 98• Provided technical support to branch offices though telephone, in person or Symantec PCAnywhere• Maintained company Exchange 5.5 Mail Server, Symantec Corporate Anti-Virus server, Windows NT file server, Microsoft Proxy Server 2, HP switches and hubs and the creation and installation of CAT 5 network cables• Performed enterprise wide assessment of computer systems regarding installed hardware, computer specifications and installed software• Ensured company was compliant regarding software licenses and setup the company’s license agreement with Microsoft

• Supervised twenty technical support representatives who would resolve connectivity issues and general computer issues on Windows 2000, Windows NT, Windows 9x, Windows 3.1, DOS, Mac OS, and Linux either though the telephone or with computers brought to the office• Mitigation of customer support issues to result in customer satisfaction• Determined current and future policy of the company• Acted as the final level of support for customer technical issues• Served as only full time Macintosh support specialist• Worked with telecommunications providers to ensure data and phone network lines ran at peak performance• Investigated and resolved all issues of potential and confirmed hacking incidents with customers, other providers and if need be, law enforcement personnel• Performed daily maintenance of web server farm (Red Hat Linux and Windows NT 4), DNS server (running BIND on UNIX), and network file server (Windows NT 4), and Cisco routers• Maintained corporate network and responsible for all computer repairs to internal computer systems

Masters Degree, Geography / Earth Science

Activities and Societies: Mens Tennis Team

Bachelors Degree, Wildlife Biology