Developed an Enterprise IT Risk Assessment Tool (called ISAAC) for the Texas A&M University & System, also adopted by the Texas Department of Information Resources for use at Texas Agencies. Served as ISSO for 7 Federal Enterprise Applications and 2 General Support Systems. Experienced with FISMA and DoD certification. Maintain and monitor 2nd generation firewall IPS and AV alerts at Plains All American for IT and Operations (OT), while building a Security Operations Center with continuous security monitoring via SIEM and SOAR technologies. Conduct physical security reviews at field sites, threat hunting, penetration testing (federal agencies, including DoD), ST&E, vulnerability assessments, create and maintain IT security policies, create and deliver both online and instructor-lead security awareness training, provide incident response handling and cyber investigations.Speaking Engagements / Papers / Accolades:-------------------------------------------------------------------API Pipeline Conference (April 2018): Speaker - Topic: "Pipeline Security: What's Being Done to Counter the Continuing Attacks on Pipelines?"Texas Dept. of Info. Resources (DIR) Information Security Forum (March 2013): Speaker - Topic: "Data Breach Panel Discussion: Lessons Learned from the Field"FBI Washington Field Office/Infragard/GTSC 2012: Speaker – Topic: Cyber Security Awareness Month – “Cyber Threats to Businesses: Trends and Vulnerabilities”US Dept. of Education ISSO Training 2012: Speaker – Topic: “Information System Security Officer (ISSO) Training and Certification Course”US Dept. of Education Annual Security & Awareness 2012: Speaker – Topic: “Annual Information Security and Privacy Awareness”ConSec 2008: Speaker - Topic: “Risk Management Best Practices”FEMA 1st Runner Up, ISSO of the Year 2008Specialties: FISMA and DIACAP Certification and Accreditation, Threat Hunting, Penetration Testing, IT Incident Response, Risk Assessment, and SIEM implementation.
Listed skills include Information Security, Vulnerability Assessment, Cissp, Security, and 45 others.