Kevin R. Mitchell Email & Phone Number

Dallas, Tx, Us

Primary for all JM Bullion information security standards, requirements, and capabilities, including proactive InfoSec management and consulting, timely incident response and remediation, continuous monitoring and assessment of all attack surfaces, ensuring JMB remains compliant with all SOX and PCI regulatory requirements, and providing targeted and actionable threat intelligence to JMB leadership.

Paris, France, Fr

Lead InfoSec Engineer on Publicis Re:Sources Vulnerability Management and Cyber-Threat Intelligence teams. Matured and improved operational efficiency and effectiveness of the Re:Sources Vulnerability Management program, moved datacenter-based program into the cloud, and drove integration with other security solutions, and the Re:Sources regulatory compliance team.

Nagoya, Aichi, Jp

Advanced TFS’ Global Vulnerability Management Program and maintained / managed global distributed Qualys scanning solution. Led VM remediation, automation, and integration projects.

Dallas, Tx, Us

Re-architected SWA's entire Vulnerability Management program, supporting their regulatory compliance requirements (PCI and SOX). Designed and deployed an enterprise-level Vulnerability Management solution (Rapid7 Nexpose), across multiple datacenters, to replace an existing legacy solution that was no longer adequate for SWA's needs. Direct liaison to our PCI QSA/ASV (Trustwave).

Designed and deployed Sourcefire Next-Generation Intrusion Prevention System (NGIPS), with Cisco Advanced Malware Protection (AMP), across all GAF sites and datacenters, our co-location facility, and financial services partner, and implemented API integration with IBM QRadar SIEM. Conducted ad-hoc and recurring Vulnerability Assessments and Penetration Testing of GAF assets, as well as Security Design Reviews and Application Testing for both externally acquired and internally developed applications. Verified GAF’s adherence to all applicable compliance and regulatory guidelines including PCI, NACHA, and OCIE. Created Security Awareness Training, Malware/Data-Breach Advisories based on NIST, and drafted communications, reporting and metrics to GAF leadership.

Midland, Texas, Us

Architected, deployed and administered enterprise Vulnerability Management Services. Configured monthly, recurring vulnerability assessment scanning of all corporate assets. Drove remediation efforts and implemented VM-scanning gates into server build and deployment processes. Decommissioned and replaced un-scalable legacy vulnerability assessment solution with robust, scalable/extensible, distributed solution engineered to accommodate existing requirements and anticipated future growth.

Norwalk, Connecticut, Us

I was directly responsible for delivering exceptional Managed Security Services to Xerox and our Commercial and Government clients. I oversaw and directed the strategic, tactical and operational activities of a large, diverse, and globally distributed team of Information Security Managers, Engineers and SOC Analysts. My functional delivery towers included the Xerox Services Vulnerability Management Group, Security Engineering Group, Global Security Operations Center, and Endpoint Protection Team. Security services delivered out of my organization included Vulnerability Management, IDS/IPS monitoring and alerting, Security Incident and Event Management, Antivirus / HIPS / Malware Protection, and custom Security Portal Development.

Norwalk, Connecticut, Us

Directed the operations of the Xerox Encryption Services Group, including securely encrypting over 50,000 globally distributed endpoints, and initiating backup tape encryption and key management using PGP and IBM TKLM. Managed the development of SaFTPaS, an encrypted server-to-server file transfer solution for securing sensitive file transfers between Xerox Services and our clients.

Norwalk, Connecticut, Us

My team designed, deployed, and managed the Secure Large-File Transfer Service; an enterprise-wide secure large-file encryption and delivery solution. We were also tasked with identifying unsecured data transfer and storage applications across Xerox Services and assisting process owners with integrating encryption and key management into their existing or planned applications.

Norwalk, Connecticut, Us

Primary responsibilities were global rollout of the Xerox Services Vulnerability Assessment Service and Host Intrusion Prevention programs for Xerox Services and our clients. Additional duties included conducting vulnerability assessments, penetration tests, and wireless audits of Xerox Service’s internal and client networks, providing on-call technical support and guidance to the security analysts in the Xerox Services SOC, taking a leadership role on high severity incidents, and designing and delivering custom technical training on information security topics.

Performed information security training for our Fortune 100 banking and financial services clients on Network and Web Application Security, Penetration Testing, IT Controls and Audit Methodologies, and current regulatory compliance laws and guidelines including PCI, Sarbanes-Oxley, GLBA, HIPAA and ISO-17799; using multiple commercial and open-source tools like nessus, nmap, netcat, Internet Scanner, Immunity Canvas, Metasploit Framework, etc.

Atlanta, Us

Designed and delivered consulting, implementation, technical support, and certification training services for all ISS and Check Point security solutions including RealSecure, Internet Scanner, System Scanner, Database Scanner, and Firewall-1 and VPN-1 across a wide range of network operating systems including WinNT/2K/XP, multiple Linux distributions, Solaris 7 and 8, FreeBSD and Nokia IPSO.

Hanover, Md, Us

In addition to Windows 2000 and Novell NetWare certification training, I worked directly with leadership to actively assess, diagnose, and intervene in areas regarding technical proficiency and certification of our consultants and contractors.

Managed CLC Garland’s Network Engineering and Management program including the daily scheduling and supervision of twelve networking instructors, optimizing and securing our corporate servers, assisting in the design and implementation of our corporate VPN, and designing and teaching certification classes on Windows NT and Novell NetWare.

San Jose, California, Us

Responsible for consulting, implementation, support, and training on all of NAI’s Network Security and SNMP-based Network Management products including PGP, CyberCop Scanner and Monitor, McAfee and Gauntlet Firewalls, SiteMeter / SiteInventory, and Sniffer Pro.

Trained end-users daily on a wide variety of applications software and operating systems including MS Office, Lotus SmartSuite, Novell PerfectOffice, MS-DOS, Windows 3.1, WFW 3.11, Windows 95, and customized customer applications. I taught both at Software Academy and on-site at customer locations and was selected to represent Software Academy for several of our largest primary accounts, traveling to their sites nationwide to develop and deliver training. In all the time that I taught at Software Academy, my customer evaluations remained consistently excellent; well above the 95th percentile.

Received the Most Valuable Player award and the Peer-to-Peer award and was promoted to Mentor of the MS-UK Excel team. Provided 3rd-level support for over 20 MS Excel support reps, including Mentor-Line support, escalations, coaching, call monitoring, and product training. Promoted to Group Manager of the MS-UK Excel team. Tripled projected earnings within the first two months while maintaining an average customer service level of 90% and higher.