Kent Knudsen, Cissp, Crisc, Gcih, Gicsp, C/Ciso Email & Phone Number

Houston, Texas, Us

As the Manager, IT Security at Enterprise Products, responsible for IT Information Security Monitoring, developing and supporting corporate IT Security strategies and safeguarding the integrity of information assets and network connections while providing production support for the security infrastructure for IT assets. My cyber team performs security continuous monitoring, incident response duties and forensic investigation of corporate assets. Further, the team performs vulnerability risk assessments and remediation efforts. I am responsible for implementing next generation security tools, including machine learning and threat intelligence. Working to improve threat hunting/ insider threat detection capabilities.Responsibilities include:• Supervising and mentoring the Security Operations team, while improving security monitoring and incident identification.• Developing and documenting analysis and response processes (playbooks), Incident response and resolution, and Improving enterprise-wide security log collection, correlation, and reporting.• Implementing automation to improve processes and reduce staff time spent on low value tasks, Monitoring for changes in attack surface and risk related to attack surface, Identifying areas for improved security controls and mitigations.• Staying current on and educating others on emerging threats and appropriate mitigation strategies, Incorporating threat intelligence into the monitoring and response process, Producing reports to communicate security risk and status to upper management.

Houston, Tx, Us

Houston, Tx, Us

As the Supervisor of Information Security at Plains, responsible for IT and OT Information Security Governance, developing and supporting corporate Information Security strategies and safeguarding the integrity of information assets and network connections while providing production support for the security infrastructure for both IT and OT. My InfoSec team performs security continuous monitoring, incident response duties and forensic investigation of corporate assets. Further, the team performs risk assessments and acts as liaison to all auditing efforts. I ensure that our security awareness training is effective with timely topics for the continuous threats that we face on a daily basis. I am responsible for implementing second generation security tools, including machine learning and threat intelligence. Working to improve threat hunting/ insider threat detection capabilities.Responsibilities include:• Providing security services to the business, reviews new technologies, performing vulnerability testing, incident response, troubleshooting, issue resolution, assess and communicates infrastructure security risk. Provide guidance across all teams and influence the design, implementation and management of the company's infrastructure as it pertains to security.• Coordinates with manager and supervisor activities of employees engaged in supporting the organization's applications and data as it relates to security. Act as Liaison between Information Technology and both internal/external auditing to track controls, coordinate audit requests and responses. Analyze SOX audit reports, SSAE 16s, of third party data centers.• Review and update Information Security policies, procedures, standards and guidelines based on best practices, industry standards, and guidelines. Review and update security training material.• Web content, alert and awareness notification and conduct training sessions for the organization and perform monthly internal phishing tests.

College Station, Tx, Us

Experienced in team & project management, responsible for assisting federal clients with all phases of compliance with the requirements of FISMA and the NIST guidelines (Special Publication 800 series). Designed and implemented a smart card physical and logical ID solution, implemented physical security cameras and DVR. Gathered requirements, evaluated technical solutions, and implemented a Security Incident and Event Management (SIEM) solution as part of the Security Operations Center (SOC) at K2Share. Lead the development and maintenance of security procedures. Served as the principal point of contact for all matters pertaining to the security of the IT systems for which the ISSO is responsible. Served as liaison between system owners, software developers, IT support staff and the ISSM for remediation of system and/or software vulnerabilities. Consistently received high marks for IA work, including successful completion of C&A packages for FEMA systems and private Cloud datacenter, FEMA Enterprise Network, and iFEMA (Enterprise tablet initiative). Performed full scale Contingency Plan Tests of systems in the DHS-TX datacenter to ensure that all controls were in place and providing adequate security as designed. Performs firewall and switch configuration reviews during annual self assessments. Prepared or oversaw the preparation and/or revision of all system certification packages and documentation required to maintain an Authority to Operate (ATO) for a team of ISSOs. Serves as the Facility Security Officer for K2Share and manages personnel clearances as well as the facility clearance.Significant accomplishments include: Maintained accreditation for a FIPS 199 “High” rated FEMA General Support System (DHS-TX) and obtained ATO status with zero errors upon review by DHS. Developed FEMA’s security hardening guide for Android and Apple iOS tablet devices, Rules of Behavior, and security policy.  FEMA 1st Runner up ISSO of the Year 2008.

College Station, Tx, Us

Computing & Information Services Department. I created a campus-wide IT risk assessment tool (called ISAAC), which was adopted by the State of Texas Dept. of Information Resources. ISAAC is used annually by TAMU to conduct IT risk assessments for over 25,000 network connected devices to provide departmental assessments as well as a composite risk report for the entire university and university system. Duties included: conducting enterprise-wide IT risk assessment and risk management reporting, development of online IT security awareness training, write and review IT security policy, investigative work on information security incidents, physical access control and auditing, customer satisfaction (surveying, analysis, and reporting). Council / Team memberships: TAMU Information Security Forum, CIS Quality Council, and the CIS Training Council.

Bachelor Of Science (B.S.), Aerospace, Aeronautical And Astronautical Engineering

Education record

Education record

Education record

Education record