Marcus Smith Cissp Email & Phone Number

Portland, Oregon Metropolitan Area

Director of SRE Job Duties Scope and Key Responsibilities• Manages multiple SRE teams• Ensures teams are working in alignment with the SRE framework and policies• Agrees roadmaps with stakeholders across multiple product areas• Advocates cross-functional technology change initiatives which supports reliability, lifecycle and security improvements• Evangelises SRE principles across technology and product teams.• Can communicate reliability and security topics to a broad audience• Promotes talent, training and learning programmes• Manages financial budget over a multi-year period• Can act as a mentor and coach to other people leadersDirector of Security Responsibilities• Provide leadership and direction for the integration of security strategy and architecture with business and IT strategy.• Manage the oversight of technical risk assessments, including vulnerability scanning, pen testing, risk reviews for applications, and third-party risk assessments.• Lead the exploration of practical security solutions to address emerging threats and compliance requirements, including design and implementation of recommended solutions.• Develop and implement security programs: manage and execute project deliverables; communicate to affected stakeholders including senior leaders; develop security procedures and flow diagrams to be implemented on an ongoing basis; and develop tools or metrics that allow for the measurement of successful program implementation.• Carry out management responsibilities in accordance with the organization’s policies, procedures, and applicable laws. Including interviewing, hiring, and training employees; planning, assigning, and directing work; appraising performance; rewarding and disciplining employees; and addressing complaints and resolving problems.• Ensure all staff are provided with training and resources needed to perform their jobs. Provide frequent feedback and coaching in order to exceed team performance goals consistently.

Portland, Oregon Metropolitan Area

• Oversee and coordinate the overall program of work to maintain the security of the products and data systems.• Orchestrate the application of security across the company’s technology estate while guaranteeing adherence to policy set by the global CISO.• Spearhead the effective implementation of security policy and governance across Cirium and leverage controls and tools to acquire facts and data before reporting and acting on findings.• Serve in a integral role by implementing threat modeling through STRIDE and PASTA, utilizing a risk-based approach to security remediation, and leveraging experience in Privacy By Design measures in data-critical environments.• Lead the creation, assessment, and implementation of controls through cloud computing, including AWS, GCP, and Azure.• Obtain and maintain a thorough and up-to-date understanding of GDPR and CCPA legislation to ensure compliance.• Carry out the creation and establishment of KPIs, metrics, and tooling to evaluate and report security posture.• Closely collaborate and communicate with the Business Information Security Manager and sales and engineering teams to guarantee timely delivery of feedback, as well as providing advice to the legal team on contractual security measures.

London, England, United Kingdom

• Preside over and direct a wide range of key security activities to maintain the security of the products and data systems, as well as leading the application of security across ICIS's technology estate.• Administer the ongoing monitoring and evaluation of adherence to policy set by the global CISO and ensure compliance with GDPR and CCPA legislation.• Pioneer the creation, development, and implementation of security policy and governance across ICIS, implement and apply controls and tools to acquire data and act on findings, and carry out the implementation of Threat Modeling through STRIDE and PASTA.• Perform the creation, assessment, and implementation of controls through Cloud Computing, including AWS, GCP, and Azure.• Devise, develop, and establish KPIs, metrics, and tooling to measure and report security posture across different squads.• Cooperate effectively with our Risk Services counterparts to achieve timely delivery and to ensure the quality and accuracy of feedback.

Portland, Oregon Area

• Oversaw the control and authorization of all daily activities within the newly formed Security Operations Center.• Provided oversight and direction to security event monitoring, management, and response to ensure success.• Leveraged playbooks and automation to drive a significant decrease in false positive alerts to effectively establish the threat landscape for the business.• Furnished tactical leadership, guidance, and direction across incident identification, assessment, quantification, reporting, communication, mitigation, and monitoring to ensure proper completion and auditing.• Navigated the coordination and execution of threat management and modeling activities, as well as defining threat vectors and creating detailed use cases for security monitoring.• Charted the creation and preparation of comprehensive reports, dashboards, and metrics for SOC operations and presentation to senior management.• Interfaced closely with key stakeholders to cultivate and maintaining a positive working relationship, safeguarding SOC as an added value.

Portland, Oregon

• Furnished guidance, knowledge, and support in the development of secure solutions to support the company’s move toward a cloud-first architecture.• Contributed extensively to the development, execution, and maintenance of global information security programs.• Closely collaborated with application, infrastructure, and operations teams in the design, implementation, and support of Columbia information security technology, processes, and functions.• Led the delivery of top-quality information security consulting services to projects and business processes.• Undertook and completed a wide range of PCI, SOX and other compliance and assessment activities as part of assigned duties.• Partnered closely and collaboratively with management and technical teams to establish security baselines, metrics, and reporting capabilities in support of the information security program.• Actively engaged and participated in the design, development, and implementation of information security solutions and technologies related to the protection, detection, response, and containment programs within the Information Security program.

Portland, Oregon Area

• Placed a strong emphasis on the security aspects of the design of systems to robustly administer possible sources of disruption and prevent misuse and malicious behavior.• Drove the continuous improvement and security of Legacy Health assets through employment of expertise in risk analysis, information security engineering, and system testing and analysis.• Led the effectively implementation of CIS benchmarks as the compliance standard for the enterprise for both server and client workstations.• Administered in-depth compliance and vulnerability scans using Nexpose and Rapid 7 to allow for maximum success.• Furnished support to Legacy stakeholders in understanding, valuing, and implementing the adoption of Microsoft PAWS architecture, including bare metal, VDI, and upgrade installations.• Functioned as a key stakeholder in the adoption and implementation of DevOps tools for the company, including vetting vendors and leading the design of the DevOps pipeline.

Palo Alto, Ca

• Cooperated effectively with the development team to guarantee they were equipped with the necessary resources to execute the development cycle of the company’s products.• Furnished support to the QA team in testing new features while providing support with regression testing as required.• Conducted research, analysis, and testing into new technologies to institute improvements in engineering productivity.• Contributed to various senior management meetings while dispensing status updates, proposed solutions, and resolutions to issues.• Closely collaborated with Product Management personnel to bring their vision into reality and further develop concepts.• Operated as escalation point for the support staff’s customer issues and concerns to achieve timely resolution.

Palo Alto, California, United States

• Performed the documentation, codifying, simplification, and automation of processes and workflows to ensure success.• Furnished in-depth support and assistance to the Customer Support organization and customers through employment of expertise in products and processes.• Carried out the ongoing enhancement, updating, and maintenance of the build platform and drove improvements in the efficiency, scalability, and stability of system resources.• Charted the creation and preparation of benchmark reports for engineering and management teams and personnel.• Utilized expertise to develop and implement proof of concept projects and perform coding with Python and Shell Scripting.• Charged with operating as the go-to engineer to orchestrate the implementation of LDAP, SAML, and SharePoint 2007, 2010, and 2013.• Dispensed support to Product Management in quantifying customer requests for features, bugs, and improvements while assisting the Technical Publications team in translating development terminology into customer friendly concepts.

Greater Los Angeles Area

Glendora Ca

Torrance, Ca

Multiple Locations

Computer Software Engineering

I continued my education but had a few life events come into play that stopped me 4 months shy of finishing. This is one of my 2015 goals.

Computer Science

Activities and Societies: Basketball, playing at the squadron, and base team levels. Competing with the ROK Team that eventually went.

General Studies

While Serving in the U.S. Air Force I used our tuition assistance program to further my education I was in the USAF for 6 years.

Associate Of Science (A.S.), Fire Science/Fire-Fighting, B

Activities and Societies: Basketball, played on the college team averaging 13 pts a game. I used LA Harbor, and El Camino College, to get.