PCI ComplianceServer and Workstation HardeningFirewall Management and ReviewProvide security resources, recommendations and information

PCI ComplianceServer and Workstation HardeningFirewall Management and ReviewProvide security resources, recommendations and information

Perform vulnerability assessmentsMonitor vendor security appliances (IDS, Log Manager, Vulnerability scanners)Log Management and analysisSecurity Report GenerationInformation Risk Assessment

Security and Identity Management - Forefront Threat Management Gateway (TMG), Unified Access Gateway (UAG), and Endpoint Protection (FEP), Server Hardening, VPNs and other access solutions,

Provide security resources, recommendations and information to other departmentsConduct security awareness training bank wide, and specialized training for ITEvaluate security on new technologies, software, appliances, etc.Develop handouts and display materials for security awareness programPerform vulnerability assessments on a monthly basisMonitor security lists for vulnerabilities and alerts, and send instructions for mitigation or resolutionMaintain log management softwareProvided final tier support to other technical departmentsManage security appliance / SSL off-loadersAutomate policy and security checksAchievements:Researched and developed a custom risk assessment framework for ITResearched requirements for GLBA, SOX-404 and other regulations applicable to ITDeveloped custom physical security checklistsDeveloped procedures and manual for litigation hold queriesDeveloped tools to retrieve and organize rights for user access reviewsDeveloped security specifications for data transfer using FTPS/ HTTPS and saved over $120,000 per year by using OpenSSL to create client certificatesEvaluated and installed SSL Accelerator/ Security devices with client-side certificate capabilityCreated tool to report workstations being powered off or connected to network against policyCreated automated consistency checks for DHCP, inventory database and workstation uptimeBuilt several Linux servers including vulnerability scanners and a FTP distribution server with bandwidth throttlingInstalled and configured Lantronix GPS NTP appliance to synchronize time across WANUpgraded and maintained enterprise log management and reporting software

Administration:Windows Active Directory and Novell eDirectory user account administration (account creation, password resets, lockout resets, enable/disable, rights management, etc.)Windows DHCP, DNS and WINS administrationProvided level 3 support to other technical departmentsEvaluated and upgraded backup systems from tapes to a disk-based systemUpgraded Workstation OS platforms from Windows 95 to Windows 2000Upgraded antivirus software from batch-file based to centrally managed corporate editionInstalled and rolled out ZenWorks for Desktops 3Redesigned, organized and maintained test lab for 1 year