Jeffrey James Bryan Carpenter Email & Phone Number

Madison, Wi, Us

San Francisco, California, Us

The Security Tinkerers is a non-profit organization comprised of world class CISOs, CTOs and cybersecurity CEOs.

•Assist clients in developing effective programs to counter cyber security threats and effectively manage information security risks.•Work with governments to build capability and capacity in their CSIRTs with National Responsibility.

Atlanta, Ga, Us

Led a team of 100 consultants, researchers and managers working over 10,000 engagements, $40 million budget, delivering incident response services to clients. Solved complex customer security incidents, cybersecurity program, and threat intel challenges.🟦 Consistently achieved sales/revenue/margin targets with high renewals, NPS scores 70+, and employee retention rate above 80%.🟦 Unified and scaled operating model globally. Fused IR with the research team, Adversarial Testing, and Security Operations.🟦 Launched significant new services including: o New incident response retainers. o Active Directory services. o Incident Commanders to advise CISOs on large scale engagements. o Integration with Adversarial Testing practice. o Delivery of “response” part of managed XDR (Extended Detection and Response) service. 🟦 Pivoted delivery to drive millions of dollars in pull-through to new company platform.🟦 Achieved high industry rankings by Forrester and IDC and accreditation by US NSA and UK NCSC🟦 Created innovative college hire program to grow new cyber security talent.

Atlanta, Ga, Us

𝘛𝘸𝘰 𝘺𝘦𝘢𝘳 𝘢𝘥𝘥𝘪𝘵𝘪𝘰𝘯𝘢𝘭 𝘢𝘴𝘴𝘪𝘨𝘯𝘮𝘦𝘯𝘵.Manage teams of researchers delivering client-facing services helping clients with threat intelligence questions and needs, and help clients identify activities on the internet, deep web, and dark web which have business risk impact.

Atlanta, Ga, Us

Manage a global incident response consulting practice that provides proactive (response planning, exercises, preparedness assessments) and reactive (services during compromise, breach or security incident).Accomplishments:• significant increase in size of team; significant increase in revenue; maintain margin targets• implemented effective globalisation plan to make consultants feel they are part of a global team and align delivery tools, processes, and training globally• built strong relationship with research group, CTU, including creating joint team for incident response to advanced 𝚊𝚍𝚟𝚎𝚛𝚜𝚊𝚛𝚢

Pittsburgh, Pennsylvania, Us

Advise CERT/CC on National CSIRT and critical infrastructure programs, and work with other countries and their CSIRTs with National Responsibility on building and increasing the effectiveness of their programs.

Amsterdam, Noord-Holland, Nl

Provided expert advice to manager and product engineers on security issues related to Philips Healthcare products and services.🟦Work with business unit to build security in and audit compliance with Philips Healthcare product security policies and requirements.🟦Advised on the creation of policies and procedures to handle product vulnerability reports from vulnerability researchers.🟦Participated in launch of a major product in Europe, and in obtaining its ISO 27001 certification.🟦Created standards and processes for evaluating risk for IT infrastructures (cloud/on premise) receiving health data from medical devices.

Assist National CSIRTs and critical infrastructure in building effective programs to protect cyber assets that national and economic security depend on.

Pittsburgh, Pa, Us

Tech Manager of the CERT/CC (2000-2011)Managed a technical program of operational analysis and applied research including vulnerability coordination, advanced incident/threat response, network traffic, malicious code analysis, and creation of country-level response teams.🟦Assisted in the transition of CERT/CC capabilities to DHS USCERT/CISA.🟦Assisted in the creation of a collaboration between the DOD and the defense industrial base. 🟦Assisted numerous countries in the creation of and thought leader for National CSIRTs.🟦Created the malicious code analysis team to develop tools, techniques, and training to make reverse engineers more effective and promote collaboration amongst those in the reverse engineering community.🟦Created a vulnerability discovery program to develop tools and techniques vendors can use in Q/A processes to reduce vulnerabilities, and to increase collaboration in the vulnerability discovery community.🟦Conducted hundreds of news media interviews and frequent public speaker including Congressional testimony.Internet Security Analyst (1995-1998), Incident Response Team Leader (1998-2000)🟦Provided technical advice to those reporting incidents to the CERT/CC while CERT/CC served the role of incident response team of last resort. Reviewed submitted data including network and system logs, advised on how to determine what happened, how to recover, and how to prevent further attacks.

Pittsburgh, Pa, Us

Lead system administrator for central network services including email, DNS, file service, and host configuration services, overseeing a team of five system administrators. Responsible for needs and capacity planning.Served on the team that developed a distributed UNIX-based computing infrastructure at the university. Developed a distributed architecture used to manage software installation and maintenance with minimum staff resources. The system was used to manage servers providing network services, faculty and staff desktop computers, and computing lab computers.On call to answer questions and problems in all supported environments. Performed initial diagnosis through observations and discussions with users. Problems were then resolved through consultation with other staff members. Voluntarily served as user consultant for Academic Computing’s helpdesk.Conducted investigations into security problems including serving as a liaison with other organisations and law enforcement. Evaluated the security exposure for services.Conducted training on new and existing services and wrote technical documentation on network services such as the infrastructure of the university network.Volunteered to serve once weekly as a user consultant in Academic Computing, helping end users with questions and problems.During this time, I was also a member of the Staff Association Council, and a staff representative to the Board of Trustees Investment Committee.

Bs, Computer Science

Education record