🛡️Justin Yost Email and Phone Number

I am a Senior Cyber Security Leader who specializes in building various facets of organizational information security programs, and reducing risk without adversely impeding information system operations. I believe that effective information security is done by:* Knowing where your critical data and critical operations exist* Spending as much time analyzing business processes as you do analyzing cyber security threats* Continuously attacking your own systems to identify the real weaknesses* Focusing resources on mitigating "root cause" vulnerabilities instead of "symptom" vulnerabilities* Having an incident response framework and testing it continually with IT and Business PartnersMy career highlights include:* Implementing security controls using built-in tools that reduced annual infections by 99% for a large-scale global enterprise network* Conducting security awareness training for over 6,000 users, IT administrators, and executives* Constructing cyber security training scenarios for multiple large multi-national military exercises* Managing a CERT contract team through an 80% growth in FTEs* Creating a data security incident response plan for a Tier II PCI-DSS merchant* Building cyber threat analysis and vulnerability prioritization processes in 2003 (before it was cool)Key Technologies:*Microsoft 365 Security Tools*Microsoft Active Directory/Azure Active Directory*CrowdStrike Endpoint Security*McAfee EPO*Rapid7 InsightIDR SIEM*Rapid7 InsightVM Vulnerability Management*Microsoft Windows*Linux (Red Hat & Ubuntu)*MacOS*Microsoft 365 for Enterprise*Google Apps for Enterprise*VMware*PowerShell*Perl