Kevin Braun Email & Phone Number

Atlanta, Georgia, United States

Experienced Cybersecurity Leader | Director of Cybersecurity Operations | Driving Resilient Defenses & Incident Response Strategies | Threat Led Intelligence Driven Organization Transformation | Fostering Collaboration & Talent Development

A highly technical role actively engaged on the front lines assisting with developing & rationalizing the business needs & approach to SecOps. Through a rigorous methodology, assesses SecOps’ capabilities, maps the attack surface, & provides an actionable playbook for up leveling maturity. The TA navigates through the requirements of maturing SecOps capabilities & works across verticals to deliver quality products & actionable insights to leadership. SpecificsSponsors workshops & research activities across all practice areas to continuously refine delivery methodology.Evaluating the true attack surface & control efficacy in the environment through attack simulations, tabletop exercises & in-depth mappingEstablish the patterns for automation use cases, developing intelligence & detection/analysis workflowsConduct assessment workshops to measure real-world security operations maturity & identify the steps required to elevate maturity, CMMI.Rapidly elevate maturity by developing tailored roadmaps for improving the quality, culture & efficacy of SecOps capabilitiesContribute insights at a technical & SLT level of the current threat landscape, technologies & leading practices Build on & improve logging & monitoring infrastructure in collaboration with Infrastructure, Security, Engineering, & Operations teamsOwn & lead security incidents, including partnering with all relevant stakeholdersEnsure Security incidents go through a full life cycle, including lessons learned & retrospective when needed to drive process improvements in detection & response capabilities as well as educate the security & engineering staff on security threatsAssist with the selection, implementation, & usage enhancement of advanced monitoring & threat hunting toolsAnalyze the latest attacker TTPs, behaviors & develop approaches to detect them across the company's diverse environments & endpointsMaintain KPIs & produce Security Team ReportsParticipate in creation of department budgets

Responsible for managing the business levels & infrastructure/business teams to identify & arrange for deployment of appropriate policy creation & development of compensating controls to address security & risk gaps in IT systems & business processes globally & communicate risks as well as impacts to Senior ManagementManage InfoSec risk assessment process & communicate risks & impactsRecommend & implement changes in security technology & practices in accordance with industry standards & best practicesProvide technical advisory services to business & technology teams concerning security controlsIdentify areas for improvement & assist in the development of solutionsCreate & review standards, guidelines, & procedures for to meet Information Security Policies as well as regulatory requirementsEvaluate vendors for new & existing solutions to assist in providing security assurance functionsManage external teams conducting security assessments & network penetration testingConduct business analysis to assist business units in integrating security into their workAssess & communicate all security risks associated with all purchases or practices performed by the companyRecommend & implement changes in security policies & practices in accordance to risks identified & regulatory requirementsIndependently provide solutions to security problems in a cost-effective mannerAssist in developing & executing security awareness trainingAudit the proper administration of, all computer security systems & their corresponding or associated softwarePromote and oversee strategic security relationships between internal resources & external entities, including government, vendors, & partner organizations.Review regional standards, procedures, & controls on an annual basis to ensure they align with policy publishedDevelop, manage, & maintain processes to ensure centrally managed services & solutions are compliant, including the tracking of all supporting reporting activities

Global

Responsible for analyzing the information security environment and developing security measures to safeguard information against accidental or unauthorized modification, destruction, or disclosure. Confer as required with management, development personnel, risk assessment staff, auditors, facilities management, and other relevant personnel to identify and implement security plans for data, software applications, hardware, telecommunications, and computer installations. Function as technical lead for design, operations and maintenance for a critical security systems such as intrusion detection systems, forensics systems, firewall software and operating platforms or extranet/intranet access management systems.

Greater Atlanta Area

Provide technical assistance and consultative guidance to a portfolio of 5000+ hotel computers and servers in North America and Latin America pertaining to PCI Compliance and Security.-I developed and implemented a Patch Management solution using LANDesk for the Americas region, and brought it's patch saturation rate from lower than 17% to above a 95% success rate.-Create and advise on strategies and workflows for securing sensitive networks and ensure PCI standards are followed.-I report on data analysis and security disclosures and stay current on daily activities and security threats to ensure a strong posture for the network and our Hotels and Guests.-Develop 0-day preventative measures and proper workflows for imminent threats and disclosures.-Develop and write daily security reports for executive management and team data flow.-Use LANDesk heavily to monitor and implement security strategy for events and develop and test the solutions to put in place.-Ensure configuration of Firewall, AV and EPS software/hardware are working and logging