Johan Braeken Email & Phone Number

Hasselt, Flemish Region, Belgium

As the world becomes more and more connected, the information security challenges are increasing in volume and complexity.Organisations are faced with the reality that what was done yesterday is no longer sufficient to protect their information, assets, people, and reputation today.As a Cegeka Trusted Security Advisor, I focus on developing long-lasting trust relationships with my customers and become a crucial member of the teams that I support.I act on operational and tactical level together with the teams that actually make it happen. I also provide advise to the C-suite or the highest levels of the organisation, shaping the customer's security strategy in an ambitious, yet realistic, way.

Brussels / Home Office

As part of Cegeka's Professional Services FL division, I work long term assignments for customers to help addressing their Information Security and Identity & Access challenges by designing solutions and project coordination.Notable customers include bpost, ING, Belfius.Achievements in this position:* Becoming functionally responsible for various security and infrastructure components, including PKI, Authentication (Cloud/MFA), Privileged access.* Managing the integration of various new security components and controls in an organisation.* Proposing, defining, and following up on projects to reduce risks, improve user experience, or become compliant with regulation / ISMS policy / good practices.* Making assessments, providing advice, and designing solutions & ways forward.* Writing RFP's and assessing responses.* Co-authoring policies, guidelines, standards, and processes/procedures.* Introducing rigorous application security monitoring. (Event, scenario, and anomaly based.)

St-Truiden, Flemish Region, Belgium

Board Member of a local beekeepers association.

Hasselt, Flemish Region, Belgium

Founding Board Member of a local hackerspace.

Network- and Applicationsecurity consultancy:Large and medium enterprises in the BeNeLux situating mainly in the financial, telecommunication, industrial and utility sector.Remote and on-site penetration and securitytesting in the broadest sense. Not only with one-shot automated vulnerabilityscanners, but also persistant scans and manual checks that require intelligent testing.Design, implementation and administration of a highly available cloudbased Web application Firewall and its supporting infrastructure. (Monitoring, Alerting, Statistics, ...)Temporary strengthening teams within various companies to tackle ICT security challenges in a hands-on as well as in an advisory role. (Infrastructure defense, Information security, Governance policies.)Advanced troubleshooting:* Problemsolving in very large and heterogeneous networks. (Performance, assymetric routing, TCP/TTL timeouts, IPSEC tunnels, multicast (L2/L3) issues, ...)* Solving protocol issues/incompatibilities between technologies of different vendors with followup and testing of vendor supplied patches. (Through RFC compliancy checks.)* Mitigating unwanted consequences/side effects in freshly implemented designs/architectures.* Getting things on the rails again in times of chaos by fixing the right things through a structured approach into problem analysis and elimination.

Working from the headquarters in Brussels, I was responsible for the smooth operation of the complete European IT infrastructure spread over a dozen locations and the management of IT projects.Besides of making sure everything keeps working, I was also in charge of designing and planning future upgrades and improvements as well as securing all IT assets.Achievements in this position:* Put the IT infrastructure back on the rails.* Implemented company wide security guidelines based on J-SOX (Japanese Sarbanes-Oxley) and BS3377.* Created Backup and DR procedures. All these are actually tested and work.* Designed and implemented pan-European redundant availability and performance monitoring for mission critical hosts and services.

Belgium

In this position the same tasks as Security Analyst apply, but on top of that I was responsible for the active shift, consisting of Security Analysts and Customer Service Desk. (5 - 8 persons)I needed to prioritize the incoming work, distribute this work among my shiftmembers and assist them whenever the need arose.I was also the person that needed to asses the security aspect of configuration changes and advice the customer if necessary.Achieved in this position:* Improved monitoring for security analysts* Brought consistency in implementation of changes

Responsable for the day-to-day security management. The main tasks are monitoring and management of remote customer devices and responding to intrusion and availability alerts, as well as performing change requests to the customer's infrastructure.

Monitoring nightly processing of social security data and installation of new software.If problems arrise, solve them and/or get the right people involved.

I helped the system/network administrator with the expansion of the computernetwork. (Connecting computers, installing software and drivers.)Also troubleshooting a wide variety of computerrelated problems and helping users was my job.