Johnathan Norris, Cissp, Oscp, Ctia Email & Phone Number

Kemah, Tx, Us

Rapid City, South Dakota, United States

My focus is understanding, developing and deploying technologies, processes, and procedures that meet regulatory and business security needs. I leverage cyber threat intelligence to identify security gaps, needs and critical vulnerabilities. My focus then becomes working with the appropriate groups to implement measures that mitigate vulnerabilities and apply best practice security controls. When information cannot be easily shared between systems, I develop connective tissue between security… Show more My focus is understanding, developing and deploying technologies, processes, and procedures that meet regulatory and business security needs. I leverage cyber threat intelligence to identify security gaps, needs and critical vulnerabilities. My focus then becomes working with the appropriate groups to implement measures that mitigate vulnerabilities and apply best practice security controls. When information cannot be easily shared between systems, I develop connective tissue between security products with python. This effort has lead to security orchestration, automation and response where it didn't previously exist. Show less

United States

Assigned as lead cyber space operator in support of major military exercises with small teams and limited resources. Coordinated the deployment of Cyber Security and monitoring tools in established infrastructure which resulted zero loss of intellectual property and quick response to all identified incidents.Developed and provided training for penetration testing fundamentals/methodologies in classroom setting. Demonstrating use of Kali Linux and tools such as Nmap, Powershell Empire… Show more Assigned as lead cyber space operator in support of major military exercises with small teams and limited resources. Coordinated the deployment of Cyber Security and monitoring tools in established infrastructure which resulted zero loss of intellectual property and quick response to all identified incidents.Developed and provided training for penetration testing fundamentals/methodologies in classroom setting. Demonstrating use of Kali Linux and tools such as Nmap, Powershell Empire, Metasploit, netcat, Burp, etc. Students/Team members acquired enhanced confidence in their own capabilities and a better understanding of the threat landscape.Assigned as Risk Management Framework control validator of major military network spanning multiple units and bases. Efforts spanned 30+ days and more than 1000 controls over multiple enclaves. Able to validate security controls met NIST standards which allowed allowed the commander to be fully mission capable.Hand selected to stand up the first Defensive Cyber Operations Company for the Marine Corps. Advised the Commander of equipment purchases, training paths. Oversaw the execution of customer engagements and defensive cyber operations. This allowed the Commander to rapidly grow a capability where one did not previously exist.Managed Certification & Accreditation and Risk Management Framework process, vulnerability programs, patch management programs, privacy act and incident response programs for multiple enclaves.Responded to threats and network incidents including spillage, attacks, infiltration and data ex-filtration in multiple European and African countries. Efforts resulted in "back to business as usual" within 16-72 hours regardless of location or network incident.Successfully passed multiple inspections including: - Blue Team - Red Team - Inspector General - Command Cyber Readiness Inspection. Show less

1207 Hargette Street, Jacksonville Nc

Built a successful Escape Room business from the ground up.Developed custom, immersive experiences to facilitate team building, collaboration in a fun/friendly atmosphere.Designed automation strategies working with and securing IoT device technologies such as ESP8266/ESP32, Raspberry Pi, and Arduino boards. Built a piano that could play itself.Developed an interview process and on-boarding events for newly hired team members.Fostered a work environment of team spirit, critical… Show more Built a successful Escape Room business from the ground up.Developed custom, immersive experiences to facilitate team building, collaboration in a fun/friendly atmosphere.Designed automation strategies working with and securing IoT device technologies such as ESP8266/ESP32, Raspberry Pi, and Arduino boards. Built a piano that could play itself.Developed an interview process and on-boarding events for newly hired team members.Fostered a work environment of team spirit, critical thinking and a sense of belonging. Advertised the business using Google Adwords, Facebook, traditional mail and other methods.Maintained the front facing website and search engine optimization to ensure our business was on the top front page of search engines. Show less

Fort Bragg, North Carolina

Conducted software testing and the development of emerging technologies/capabilities applying SCRUM and AGILE methodologies.Conducted black and white box penetration tests of multiple applications and equipment. Reported all findings and provided recommendations for security enhancements and application/equipment employment.Delivered final products to customers on time or ahead of schedule and aided implementation into customers critical business processes with zero down time or… Show more Conducted software testing and the development of emerging technologies/capabilities applying SCRUM and AGILE methodologies.Conducted black and white box penetration tests of multiple applications and equipment. Reported all findings and provided recommendations for security enhancements and application/equipment employment.Delivered final products to customers on time or ahead of schedule and aided implementation into customers critical business processes with zero down time or interruptions in day to day activities.Managed multi-million dollars worth of equipment and software inventory with zero losses.Managed small and large teams while ensuring team goals were aligned to business objectives. Show less

Assesses, evaluates, and offers mitigation recommendations pertaining to security risks in an enterprise-class networking environment.In-depth security analysis of the following network-related components:Cisco switch, router, and firewall configurationsPerimeter securityEndpoint securityVPN GatewaysPerimeter IDS/IPSWeb Security GatewaysInterfaces with the customer during meetings, briefings, when providing security assessments/analyses, remediation… Show more Assesses, evaluates, and offers mitigation recommendations pertaining to security risks in an enterprise-class networking environment.In-depth security analysis of the following network-related components:Cisco switch, router, and firewall configurationsPerimeter securityEndpoint securityVPN GatewaysPerimeter IDS/IPSWeb Security GatewaysInterfaces with the customer during meetings, briefings, when providing security assessments/analyses, remediation reports, and other related systems engineering briefings. Show less