Laura Raderman Email & Phone Number

Clairton, Pa, Us

Greater Pittsburgh Area

Manage all information security compliance concerns at the University (both administrative and research). Primary "go-to" person for all PCI-DSS compliance questions and responsible for ensuring all our merchants on campus are ready for our annual QSA audit. Interface with our QSA for answering any questions. Responsible for ensuring any reported PCI incidents are investigated, documented, and closed out as required by PCI-DSS.Work with Office of General Counsel, Contracts Office, Computing Services, and other IT groups on campus to ensure that all data is protected appropriately and according to any contractual requirements and balancing compliance requirements with budgets and technical capabilities.Supported the National Robotics and Engineering Center (NREC) in their effort to comply with NIST 800-171 requirements to support federal defense research.Support campus-wide GDPR and NIST 800-171 efforts as a subject matter expert.As part of an Educause working group, developed the HECVAT (Higher Education Cloud Vendor Assessment Tool).

Herndon, Va

10Pearls purchased Gemini Security Solutions. I continue to do the exact same things for the exact same customers.

Chantilly, Va

•Developed Gemini’s Information Protection Assessment methodology•Manage client relationships for new and existing projects•Project management from initial scope and requirements to project closure•Oversee all security assessments, including policy assessments and vulnerability testing•Create, develop and modify information security policies to ensure they are appropriate for the organization•Assist organizations during mergers and acquisitions to ensure that information security policies are applicable to the new environment and assist the acquired company to meet the information security standards set by the acquiring organization•Create software development life cycle documentation and planning•Review code for security issues•Create validation plan and documentation to operate computer systems in a validated environment. Validation projects have included cryptographic libraries, customized software, and PKI deployments.•Work with Signatures and Authentication for Everyone (SAFE) initiative.•Manage a team on security reviews of numerous enterprise software products including Siebel, Cognos, Documentum, webMethods, Peoplesoft EnterpriseOne, Windows 2008, Airwatch.•Train customers in network and computer security such as network based attacks, buffer overflows, kiosk lockdown, network scanning and OS signatures, NTLM and Windows security and SSL protocols•Lead teams in attack and penetration testing of numerous customers' and business partners' networks. As part of this process, I manage all customer interactions, ensuring that customer concerns are addressed.•Lead UNIX developer for TrustEnabler, a web server plugin which adds Certificate Revocation List (CRL) checking and bridged certification path validation capability to web servers

Chantilly, Va

• Oversee all security assessments, including policy assessments and vulnerability testing• Create, develop and modify information security policies to ensure they are appropriate for the organization• Create software development life cycle documentation and planning.• Create validation plan and documentation to operate computer systems in a validated environment. Validation projects have included cryptographic libraries, customized software, and PKI deployments.• Work with Signatures and Authentication for Everyone (SAFE) initiative.• Manage a team on security reviews of numerous enterprise software products.• Train customers in network and computer security such as network based attacks, buffer overflows, kiosk lockdown, network scanning and OS signatures, NTLM and Windows security and SSL protocols.• Lead teams in attack and penetration testing of numerous customers' and business partners' networks. As part of this process, I manage all customer interactions, ensuring that customer concerns are addressed.• Lead UNIX developer for TrustEnabler, a web server plugin which adds Certificate Revocation List (CRL) checking and bridged certification path validation capability to web servers.

• Specialized in attack and penetration testing.• Lead instructor for Ultimate Hacking class, teaching clients and customers how to begin conducting internal penetration assessments.• Maintain methodology, documentation, and tools for UNIX host review engagements, enabling consultants to efficiently and methodically conduct UNIX host reviews for clients.• Assisted in the development and maintenance of Foundstone's Secure Coding class.

Worked for the Intelligent Agents group within the Robotics Institute while completing my thesis.•Assisted Project Coordinator in system administration duties for both Windows and UNIX systems.•Researched mobile ad-hoc wireless networking protocols and their interactions with Agent software.•Concentrating on using Agent software to dynamically control the routing protocol a network uses.•Improved MIGSOCK (TCP socket migration) to include support for multi-threaded, multi-socket processes.

Greater Pittsburgh Area

•Assisted professors for 5 classes: 15-100: Intro to Programming in Java 15-121: Intermediate Programming in Java 15-113: Intro to C 95-799: Open Source Technologies: Linux 95-800: Open Source Technologies: Apache•Graded assignments, held office hours, and published assignment solutions to course web page•Maintained course web page (95-799, 95-800, 15-113)•Assisted in planning each day's lectures, homework assignments, and taught class on a regular basis (15-113)

Greater Pittsburgh Area

•Assisted the cluster manager in the Information Networking Institute cluster - mainly responsible for the Unix/Linux systems and security•Consulted with Cluster Manager on security software and policies•Encouraged increased security awareness among users•Responsible for intrusion detection on Linux machines•Temporarily filled the Cluster Manager position while a new permanent employee was hired

College Station, Texas

•Responsible for the department's Linux machines, department web server (hardware and software), department databases, and calclab machines•Design of all new databases and maintenance of existing ones•Basic systems administration work on all department systems and various programming tasks required by the department, including CGI scripts, shell scripts, and simple applications•Consulted with Senior Systems Analyst on security software and policies•Supervised the Programming Assistant and student worker•Minor computer maintenance such as replacing and installing new parts

Ms/Mba, Technology Management

Dual degree program, MS in technology management with a focus on project management, and an MBA.

Ms, Information Networking

Bs, Computer Science

Activities and Societies: TAMULUG