Security, Identity, IT, Technical Infrastructure, Business Systems, Developer Tools

Manage multiple teams focusing and supporting:- Product Security- Software Security- Corporate Security- Offensive Security- Infrastructure Security- Enterprise Security- Security Operations- Detection Engineering- Incident Response- Data Privacy and Trust- Enterprise Sales - Governance, Risk, and Compliance

Network Engineering & SecuritySystems Engineering & Corporate Infrastructure Security OperationsSoftware & Product SecurityOffensive Security & Engineering

Head of Information Security.Building, developing and maturing information and cyber security department and company posture. Leading teams focusing on Application, Network, Systems, Infrastructure, Engineering, Cloud, and Cyber Security. Architecting, deploying, implementing, and automating multiple security solutions for network, application, infrastructure, and cloud systems.Projects and responsibilities:SIEM/Logging and Monitoring, Automation, Next Generation Firewalls, Network Security, VPN, Endpoint Protection, SSO and MFA Integration, Education and Awareness, Vulnerability Management, Risk Management, Compliance, Policies and Procedures, Application Security, Static Code Review, Web Application Firewall, Containerization, Virtualization, Infrastructure, Application Stack, Penetration Testing, Cloud Security (Google, Office365, AWS, etc.), Identify and Access Management, Incident Response, Endpoint Security

Build, develop and mature the Information Security program.Projects and responsibilities:Web Application Firewall, Security Information Event Management, Vulnerability Management, PCI Compliance, Bounty Program, Host and Network Intrusion Detection System, Patch Management, ACL Review, Network Proxy, AWS and Google Cloud Security, Incident Response

Full Stack Security Ninja/Compliance NegotiatorSecuring the infrastructure with Shatner.Protecting mobile/web applications, systems, networks, data, users.Projects and responsibilities:Architect, monitored, and implemented cloud security controls around new AWS deploymentMobile and Web application testing on all internal, external and affiliate sitesPenetration and vulnerability testing on company’s network and infrastructure covering the full stackManaged and lead compliance, risk analysis, incident response and vulnerability scanning of all environments.Deployed and managed open source NIDS using network taps and aggregators to monitor traffic and events.Implemented, supported, and tested network devices from ASM on F5 Load balancers to Palo Alto and Fortinet firewalls.

One stop shop of security, helping secure 5 percent of global internet traffic. Vulnerability Assessment and ManagementPenetration Testing and Web Application ScanningRisk Analysis, Mitigation, Patch Management, HardeningNetwork Security, Scanning and ACL ReviewSSL Administrator and ImplementationNetwork Monitoring, Logging, and Access ControlFirewall/VPN design, installation and management