Lee Mason Email & Phone Number

Blacksburg, Virginia, United States

My passion has always been to think creatively, develop novel solutions and build support base for successful implementation. I would like to take my problem solving and people skills in helping others turn their ideas into commercial success.

Woodbridge, Va

Responsible for seeking solutions to meet cyber security needs and to automate labor intensive processes via customized application development.• Conduct cyber security risk assessment for small and medium businesses (SMB), initiate Blue Team remediation efforts and pre-sales activities for additional products and services.• Configure, install and test FireEye NX, EX and CMS appliances.• Developed a business case for offering role-based encryption technology (ERUCES Tricryption)… Show more Responsible for seeking solutions to meet cyber security needs and to automate labor intensive processes via customized application development.• Conduct cyber security risk assessment for small and medium businesses (SMB), initiate Blue Team remediation efforts and pre-sales activities for additional products and services.• Configure, install and test FireEye NX, EX and CMS appliances.• Developed a business case for offering role-based encryption technology (ERUCES Tricryption) in the cloud to protect SMB data confidentiality.• Formed a partnership (Benga Trade Compliance, LLC) to build a cloud-based workflow automation software for export trade compliance. Planned a complementary ecosystem for SaaS workflow, consulting and training verticals. Evaluated Business Process Management and open source platforms, and selected Ruby on Rails for prototype design. Show less

Arlington, Va

Responsible for conducting computer security site inspection/audit of 79 WHA posts, mitigating risks discovered and advising senior managers on resolving enterprise IT security issues.• Conducted detailed computer security assessments (CSA) at US diplomatic missions in Latin America for compliance to Department Standards. Recommended industry best practices to improve both security and operational efficiency. Identified and resolved priority risks.• Evaluated the current RCSO… Show more Responsible for conducting computer security site inspection/audit of 79 WHA posts, mitigating risks discovered and advising senior managers on resolving enterprise IT security issues.• Conducted detailed computer security assessments (CSA) at US diplomatic missions in Latin America for compliance to Department Standards. Recommended industry best practices to improve both security and operational efficiency. Identified and resolved priority risks.• Evaluated the current RCSO assessment methodology for IT risk management effectiveness; discovered deficiencies and devised training plan to migrate skillset to malware detection and blue team remediation.• Led Red and Blue Team members in conducting a special risk assessment of a large embassy. • Conducted vulnerability and configuration compliance scans, adjudicated results and mitigated vulnerabilities. Audited effectiveness of physical, procedural and technical security controls.• Advised senior mission management including ambassadors on improving internal controls. Provided ad hoc information security training and awareness briefings.• Analyzed effectiveness of IT Contingency, Disaster Recovery and System Security Plans. • Built long term relationships by providing outstanding customer service, and balancing security and operation efficiency requirements.• Perform wired/wireless network traffic analysis and hardware scans using Fluke Optiview Network Analyzer. Show less

Arlington, Va

Responsible for cyber security tool infrastructure, end-point configuration management, security audits and consulting services on the Department’s Sensitive but Unclassified (SBU) and Secret (CLAN) level networks. • Managed system lifecycle of cyber security tool infrastructure including IDS/IPS, DLP, SIEM, packet capture, and compliance/vulnerability scanners.• Acted as a trusted advisor to the DoS CISO for discovering and remediating vulnerabilities discovered during… Show more Responsible for cyber security tool infrastructure, end-point configuration management, security audits and consulting services on the Department’s Sensitive but Unclassified (SBU) and Secret (CLAN) level networks. • Managed system lifecycle of cyber security tool infrastructure including IDS/IPS, DLP, SIEM, packet capture, and compliance/vulnerability scanners.• Acted as a trusted advisor to the DoS CISO for discovering and remediating vulnerabilities discovered during iPost/Continuous Monitoring compliance and vulnerability scans. • Evaluated security configuration requirements for operating systems, application software and network devices. • Advised the CIO on mitigating enterprise risks from the “Mobile Diplomat” initiative. • Persuaded Skills Incentive Program panel consisting of CIO, SAIT Dean and Deputy Director General to extend IT skills incentive benefits to Regional Computer Security Officers for retention purpose.• Devised strategies to neutralize advance cyber threats based on Intelligence Community (IC) agency inputs.• Audited effectiveness of physical, procedural and technical security controls of DoS missions worldwide. • Standardized on IronKey USB flash drives and activated Symantec SEP USB whitelisting functionality globally to secure mobile data and prevent unauthorized data transfers.• Enforced cyber security policy compliance, adjudicated exception requests and revised outdated policies.• Advised Department IT developers and system owners on compliance with Federal IT standards and regulations such as NIST, CNSS, FIPS and FISMA.• As acting Office Director, led the Department’s incident response and containment of a fast spreading Spear Phishing attack that exploited database servers worldwide. Coordinated with system owners to remediate the exploited and vulnerable servers. Instituted temporary firewall blocks to secure unpatched servers. Show less

Arlington, Va

Responsible for managing the Department’s sensitive space construction/renovation standards, acoustic and electromagnetic (A&E) facility shielding standards, TEMPEST emanation requirements, and IT supply chain vulnerabilities. • Realized the potential of a novel “better but cheaper” concrete radio-frequency shielding technology, and convinced the Canadian government patent owner and Intelligence Community agency to partner with ECB in an aggressive beta pilot $1.4M project to evaluated… Show more Responsible for managing the Department’s sensitive space construction/renovation standards, acoustic and electromagnetic (A&E) facility shielding standards, TEMPEST emanation requirements, and IT supply chain vulnerabilities. • Realized the potential of a novel “better but cheaper” concrete radio-frequency shielding technology, and convinced the Canadian government patent owner and Intelligence Community agency to partner with ECB in an aggressive beta pilot $1.4M project to evaluated effectiveness for shielding, blast, and forced entry/ballistic resistance. • Managed the Department’s acoustic and electromagnetic (A&E) facility shielding standards, TEMPEST emanation risk, and IT supply chain vulnerabilities. • Chaired the multi-agency Overseas Security Policy Board (OSPB) A&E and Unclassified Electrical & Electronic Equipment working groups consisting of ODNI, CIA, NSA, DIA and FBI representatives for Standards updates to reflect new technology adoption, current market and threat environment.• Reviewed, negotiated and approved building construction and renovation project design for adherence to Controlled Access Area (CAA) Standards. Responsible for approving Special Compartmented Information Facility (SCIF), Restricted and Core Area projects. • Evaluated and approved renovation requirements for multi-agency Olympic Coordination Office during Vancouver Winter Olympics. Negotiated and designed secure space for Joint Operations Center and Threat Integration Center. • Evaluated IT supply chain risks and BIOS firmware vulnerabilities to prevent hardware tampering. Show less

Pretoria, South Africa

Mandated with improving the computer security posture of 45 African posts. (The position had no authority over IT operational personnel hence the need to use persuasion extensively.) • Conducted computer security assessment (CSA) of IT security posture including technical, administrative and physical controls at embassies and consulates. • Inspected both Classified and Sensitive But Unclassified (SBU) networks for unauthorized hardware, software, connectivity, data and network… Show more Mandated with improving the computer security posture of 45 African posts. (The position had no authority over IT operational personnel hence the need to use persuasion extensively.) • Conducted computer security assessment (CSA) of IT security posture including technical, administrative and physical controls at embassies and consulates. • Inspected both Classified and Sensitive But Unclassified (SBU) networks for unauthorized hardware, software, connectivity, data and network behavior. • Performed wired and wireless network traffic and hardware scans using Fluke Optiview Network Analyzer.• Conducted operating system compliance scans on all servers and workstations for security configuration compliance. • Investigated user network misconduct via Encase forensic tool. • Consulted with senior mission manager including ambassadors to improve internal controls.• Conducted computer security training to system administrators. • Evaluated effectiveness of IT Contingency and Security Plans. • Provided IT security and awareness briefings. • Partnered with Headquarters based IT operational personnel to fix persistent cyber security issues at chronically understaffed posts. • Trained and supervised a junior RCSO. Show less

Manila, Philippines

Responsible for computer security posture at 42 Asian Pacific posts. • Conducted CSA audits to verify the IT security compliance to Department Standards and industry best practices.• Trained embassy/consulate system administrators to adopt computer security best practices in daily operations.• Provided computer security briefings to all mission personnel from ambassador to staff.• Scanned networks for unauthorized hardware, software, data and network behavior.• Consulted… Show more Responsible for computer security posture at 42 Asian Pacific posts. • Conducted CSA audits to verify the IT security compliance to Department Standards and industry best practices.• Trained embassy/consulate system administrators to adopt computer security best practices in daily operations.• Provided computer security briefings to all mission personnel from ambassador to staff.• Scanned networks for unauthorized hardware, software, data and network behavior.• Consulted with mission management and IT staff to improve security controls. Show less

Springfield, Va

Responsible for designing, installing and maintaining the Department’s security systems including intrusion detection alarms, door access controls, Closed Circuit Television (CCTV) equipment and anti-ram vehicle barriers worldwide. • Developed a new SQL database to track security equipment inventory, transfers, and repairs.• Designed an electrical power system for security equipment utilizing redundancy and failover features.

Dakar, Senegal

Responsible for technical and physical security posture of U.S. missions within West Africa to protect information, life and infrastructure. • Designed, installed and maintained intrusion detection, access control, and CCTV surveillance systems. • Conducted Technical Surveillance Countermeasure (TSCM) inspections to confirm integrity of classified office space. • Surveyed, designed and installed security systems for new classified facilities.

Athens, Greece

Washington, Dc

Bee, Electrical Engineering

Activities and Societies: IEEE Chairman

Education record

Education record