Mark S. Email & Phone Number

St. Louis, Mo, Us

Pune, Maharashtra, In

• Successfully completed transfer of SOC operations. e.g. KT and application understanding documents for all SOC responsible applications• Interviewed, and trained new SOC analysts based on client SOW & best practice• Daily management of SOC ticket efforts. e.g. email receipt issues, whitelisting of domains, IP’s, email ID’s and eDiscovery investigations• Led offshore analysts in forming sound remediation actions based on data derived from network and host-based security appliance logs and alerts (FW, IDS/IPS, Syslog, etc.)• SIEM management including: Reliability of parsed information, indicators of compromise (IOC), payload review, offense mitigation and the use of Open Source Intelligence, etc.• Completed requirements planning for Splunk SVA predicated on architecture review and analysis of current data ingestion• Established, documented and implemented Nessus credentialed scanning and vulnerability patching procedures for Windows / Linux servers and workstations via SCCM and manual remediation efforts• Implementation of various policy configurations to further enhance security via FortiMail, Cylance and 0365. e.g. spoofed emails, DKIM, DLP etc.• Based on requirements and analysis, created SOPs, playbooks, RACI/Process-flow charts, templates and other resource references• Designed and documented Cofense Triage runbook for phishing email analysis, identification and purging of malicious emails• Based on CIO requirements, created and published SOC monthly metrics• Successfully completed policy update and simplification for Ford’s global Information Security Policy (ISP) to better align with ISO 27002 and EU GDPR. e.g. Area’s like: Asset Management, Supplier Relationships and Communications Security• Prepared and led NIST Cybersecurity Framework (CSFW) assessment for Atlanta based chemical co. e.g. asset baseline, business process flow, policy, standards, risk and gap analysis etc.

• Concentrated focus for small to medium sized enterprises in identification of risk and control gaps based on analysis of client’s organizational structure / requirement; to help minimize monetary, legal and reputation exposure• Controls tailoring and development starting with asset baseline classification through ongoing analysis procedures and controls• Enumeration & vulnerability analysis, insider threat examination, and delivery of a complete post-engagement controls, policies, and procedures report based on organizational requirements; grounded in the standards and guidance of FISMA FIPS 199/200 - NIST 800-53, ISO 27001/02 and COBIT• Forensic artifact investigations; photography, documentation, and cataloging• Digital Forensics for Mobile using Oxy-Forensic suite and HDD using F.R.E.D. (Forensic Recovery of Evidence Device)

• Successfully implemented the cyber studies Offensive/Defensive research & testing lab• Subject to organizational scope, tailoring needs, and federal regulatory requirements; effectively baselined, analyzed, and implemented best practice controls, policies, procedures and countermeasures utilizing NIST 800-53a standards and guidance• Installed and configured AD DS, DNS, and DHCP on Win Server 2012 R2 to facilitate lab and web controls for the student lab LAN, WLAN, and VPN environments• Finalized Virtual-Machine (VM) environment utilizing VMware EXSI hypervisor and installation of required test environment operating systems necessary for lab testing and research• Vulnerability, hacking, and digital forensics testing and research

• Facing disparate sources of pillared data and legacy apps/systems. The Supply Chain Management (SCM) stakeholders goal was the creation of a single-point-of-truth SCM Enterprise DataWarehouse (EDW)• Comprised of 31 apps and over 300 tables, successfully converted/customized the SCM EDW• Reduced complexity by removing data pillars, vetted over 7,000 data artifacts to establish baseline, positioned EDW for predictive analytics, converted over 100 reports, enhanced ad-hoc capabilities, reduced onshore/offshore resource requirements, and attained net savings based on prior vendor RFQ• Hands on collaboration with application security team to establish app security policies and procedures; pre, during and post implementation• Successfully decommissioned 21 legacy applications

• Supported successful deployment of Win 7 for over 800 end-users at multiple locations• Assisted network engineering team in capturing Win7 deployment image using Win ImageX• Effectively used ePrimus and ServiceNow to quickly and accurately resolve level II desk-side support tickets

New York, Ny, Us

• Rose from Advisor to District VP of Investments in under three years• Developed and tailored an Investments Profiling Process (IPP) implemented company-wide• Received Top Producer Award as IPP increased sales by approximately 15% in its first year• Transitioned to leadership role and provided training, coaching and mentoring while leading over 100 financial advisors and 400 bankers

Washington, Dc, Us

• Russian theater specialist, Russian/Polish language speaker, and member of strategic investigations team specializing in retrieval of essential information• Classified-Data clerk responsible for: Access control, chain-of-custody, tracking, and secure destruction of classified materials• Aid to Depot Law Center, Parris Island, SC JAG Prosecution Lead Council; successfully tried and won two large profile General Court-martials• Performed preliminary pretrial investigation and drafting of charges for violations under the UCMJ• Coached and trained both professional and layperson witnesses to prepare them for trial testimony and cross-examination• Prosecution chain-of-custody clerk responsible for initial classification, documentation, sequence of custody, transfer of custody, secure storage, and disposal of evidence

Master Of Science In Information Assurance - Cybersecurity Major, Cybersecurity Controls Audit, Ethical Hacking, Cybersecurity Law

Bachelor Of Business Administration - Bba, Supply Chain Management / Finance

Russian Language