Mandy Cloud Mccune Email & Phone Number

•Pioneered development of comprehensive and innovative cybersecurity solutions for Texas state agency customers (DIR). including EDR, NDR Purple Teaming, Vulnerability Management, SOC, SIEM, FW Darknet Monitoring, Social Engineering (SE) and various others. •Architected and matured critical services ensuring robust protection against evolving cyber threats for state-level clients by maturing processes, technical documentation, runbooks, reporting and automation; continuously adapting strategies to stay ahead of emerging cyber risks in government systems.•Streamlined change management, chairing Cyber CAB, enhancing process efficiency, advanced asset management and patch processes, strengthening security posture. Optimized project outcomes through strategic resource allocation, data-driven decision-making, and proactive risk management techniques.•Drive process optimization and automation initiatives, significantly improving operational efficiency and reducing response times to potential security incidents. Developed and maintained centralized Cybersecurity SharePoint, fostering cross-team collaboration, vendor management and asset tracking.

Redwood City, California, Us

• Supported incident response forensics and remediation/mitigation efforts• Led network security team to ensure compliance and reduce risk and ensure network security best practices were adhered to.• Implemented streamlined firewall change management process, improving efficiency and SLA times and reducing commit failures.• Analyzed and approved firewall change requests, identifying potential security risks and technical issues. Developed new policies for enhanced network protection.• Pioneered optimized firewall rule naming conventions and documentation standards. Created comprehensive InfoSec project management system using SharePoint and JIRA.• Implemented policies that significantly improved network security operations.• Fostered cross-team collaboration through improved documentation and awareness initiatives.• Maintained team knowledge bases on SharePoint and Confluence.

• Evaluated and implemented new security solutions to align with business and client objectives ; driving operational excellence across multiple security domains.• Lead SMEs across multiple security domains in deploying and maintaining key security systems, optimizing operational efficiency while ensuring SLA compliance and service excellence.• Coordinated T3/SME team activities to align with customer objectives for security device management, more efficient operations and minimizing service disruptions for clients. Fostered cross-functional cooperation to streamline change management and bolster security protocols across state-level organizations.• Developed and maintained Technical Provisioning Document, used to streamline the customer onboarding process and enhance service deployment efficiency.• Developed and maintained centralized SharePoint platform, revolutionizing collaboration and vendor management for enhanced cybersecurity outcomes driving process optimization and automation initiatives, significantly improving operational efforts and reducing response times to potential security incidents.

Falls Church, Virginia, Us

• Provided Managed Security Services (MSS) including Managed SOC and Incident Response (IR) services covering a wide range of security solutions, network devices (on-prem, cloud and hybrid environments) for Clients in numerous industries (government and private).• Conducted risk assessments (network, system and application level) across a wide range of global security devices, performed configuration and threat/alert monitoring (SIEM), community security awareness and mentoring programs, enhancement of security controls to fortify network defenses and mitigate threats.• Spearheaded a new vulnerability management processes that directly leveraged the internal SOC. This initiative achieved a 30% reduction in network vulnerabilities identification and elimination/replacement of rogue, shadow and unsupported hosts and increased efficiency (alert to remediation time) by over 50% within first six months of implementation by enhancing risk visibility through real-time correlation of vulnerability assessment data, alerting and threat intelligence leading to vastly improved reporting with meaningful and actionable metrics, Increased “quick wins” by correlating vulnerabilities with subnets and patch management activities and providing near real-time alerting leading to improved and more informed decision-making, matured remediation efforts and a more streamlined incident response processes.• Increased company ability to stay ahead of evolving threats through standardizing the evaluation requirements of new security solutions and maturation of software lifecycle management process • Created and maintained SharePoint sites for project management, fostering cross-departmental collaboration and enhancing team efficiency.

Falls Church, Virginia, Us

• Led and/or supported multiple large scale incident response engagements and breach indicator assessments (both PCI and non-PCI), liaising with stakeholders and performing forensics to uncover IOCs maintaining rigorous chain of custody protocols• Architect and managed build-out of new multi-tenant Security Operation Center (SOC) , establishing reporting structures, escalation procedures, and custom client-specific threat detection mechanisms including standard and custom alert signature creation and hunting (e.g. Bro, Suricata, ET) , for Customer security solutions and managed services (e.g. IDPS, FW, MDR, SIEM) all utilizing various sources (e.g. vendor alerts, government bulletins, open source, threat intelligence, etc.) for enhanced security posture.• Executed comprehensive InfoSec projects and MSS services MSS services including (among others): internal and external vulnerability assessments, penetration testing (network, web and application), social engineering assessments, risk and gap assessments (including PCI), document destruction audit, audit and creation of InfoSec policies and procedures across various industries, cyber insurance policy review and needs assessment with each service providing actionable insights to fortify client defenses• Developed and delivered specialized InfoSec training courses, including: “Security Operations Center Fundamentals” customized training the Louisiana National Guard in SOC Operations and “Technical Auditing for the Non-Technical Auditor“ for financial institutions (among others)• Ensuring client satisfaction through meticulous planning and execution of maintaining superior customer relationship management and retention programs and shepherding in new business from bids to project scoping, performance of services through project closure and related contracts, deliverables and details (e.g. RFP, RFI, ROE, SOW, SLAs)

Woodworth, Louisiana, Us

Other positions held: Technical Project Manager, Cybersecurity Analyst III, Consultant• Led and/or supported multiple large scale incident response engagements and breach indicator assessments (both PCI and non-PCI), liaising with stakeholders and performing forensics to uncover IOCs maintaining rigorous chain of custody protocols• Architect and managed build-out of new multi-tenant Security Operation Center (SOC) , establishing reporting structures, escalation procedures, and custom client-specific threat detection mechanisms including standard and custom alert signature creation and hunting (e.g. Bro, Suricata, ET) , for Customer security solutions and managed services (e.g. IDPS, FW, MDR, SIEM) all utilizing various sources (e.g. vendor alerts, government bulletins, open source, threat intelligence, etc.) for enhanced security posture.• Executed comprehensive InfoSec projects and MSS services MSS services including (among others): internal and external vulnerability assessments, penetration testing (network, web and application), social engineering assessments, risk and gap assessments (including PCI), document destruction audit, audit and creation of InfoSec policies and procedures across various industries, cyber insurance policy review and needs assessment with each service providing actionable insights to fortify client defenses• Developed and delivered specialized InfoSec training courses, including: “Security Operations Center Fundamentals” customized training the Louisiana National Guard in SOC Operations and “Technical Auditing for the Non-Technical Auditor“ for financial institutions (among others)• Ensuring client satisfaction through meticulous planning and execution of maintaining superior customer relationship management and retention programs and shepherding in new business from bids to project scoping, performance of services through project closure and related contracts, deliverables and details (e.g. RFP, RFI, ROE, SOW, SLAs)

Shreveport, La, Us

• Co-Authored for-credit LSUS capstone course GS491 to integrate technology-driven and industry-relevant assignments, that bridged the gap between traditional and digital research methods, enhancing student engagement and digital literacy.• Authored and instructed LSUS-CE continuing education course: “Internet Research with Google” and authored textbook of the same name.• Empowered instructors through tailored guidance, elevating course content and fostering a tech-savvy learning environment.• Proposed innovative research topics at LSUS, anticipating future trends and positioning students toward current industry issues.

Shreveport, La, Us

Every search is unique as is every researcher.As one of the instructors at LSUS-CE department I guide participants through strategies of online research, key terms, resource guides, directories, tools, and introduction to Boolean Logic, Phrase and Field searching to develop skills to effectively and economically access specific information from the Web.

Shreveport, Louisiana, Us

• Performed specific and niche research across multiple programs; Data management, Custom search engine creation, Automated Tool configuration• Developed and implemented innovative and original theories and methods to support SAP Department needs• Supported MRG Global efforts in training and building up skills of researchers in the network across the globe by developing research methodologies, training guides and playbooks, and provided live web-based training along with ongoing research support• Managed (as part of a 2 man team) the company social media presence and content creation• Constructed informative job advertisements that accurately conveyed Client requirements and highlighted Candidate benefits.

Us

• Streamlined contract management processes, reducing errors and improving efficiency in chargeback and credit resolutions between drug manufacturers and pharmacies.• Developed comprehensive onboarding program, including role-specific guides and training goals, enhancing new hire integration and productivity.• Conducted meticulous contract reviews, identifying discrepancies and implementing data entry improvements to minimize financial inaccuracies.• Facilitated smooth communication between drug manufacturers and pharmacies, ensuring mutual understanding and compliance with group purchasing agreements.• Optimized contract administration workflows, resulting in faster resolution times and improved stakeholder satisfaction across the pharmaceutical supply chain.

Northbrook, Il, Us

Liife, Health & Accident; Licensed ProducerProperty & Casualty Licensed Producer • Specialized in auto, home, life, health, accident and cyber insurance. • Analyzed market trends to tailor insurance offerings, optimized policy issuance procedures, and strategically managed office operations for peak performance.• Meticulously maintained customer insurance portfolios, created standardized policy forms, and ensured seamless office management during leadership absences.• Fostered client relationships through personalized insurance solutions, streamlined policy processes, and provided comprehensive support to the team.• Pioneered streamlined policy issuance procedures, significantly reducing processing time and improving operational efficiency.• Managed the office and handle customer issues when the head Agent was out of office.

Followed teacher provided or created lesson plans depending on needs of the school. Maintained order in the classroom through consistency, mutual respect and understanding, and clear set rules and schedules.

Security Essentials - Specialized Knowledge And Applications

Certificate Of Completion, Adult And Continuing Education And Teaching

Network Security

Resident License Authority

High School Diploma

Bachelor'S Degree, Network Security