Matthew Puckett Email & Phone Number

Lawrenceville, Ga, Us

As CISO, my responsibility has been to establish a new Cybersecurity division to protect systems for nearly 1 million residents and 6000 users. As the leader of this team, I have:Established a 17 person cybersecurity division responsible for monitoring, incident response, vulnerability management, application security, and compliance.Determined, communicated and implemented a strategy to implement cybersecurity best practices based on the Center for Internet Security framework. Advised other senior level positions on security threats, risks and counter measures in ways that are understandable to non-technical leaders.Provided technical guidance to other teams and participated as a SME in architecture discussions.Lead the division in implementing major security initiatives such as establishing a SOC, vulnerability management, MFA and user education.Participated in multiple major RFPs as a security subject matter expert.Supported the risk management department in acquiring cyber security insurance.Improved security governance by drafting County policy and establishing department level standards.Worked with other leadership to ensure security posture was maintained or improved as part of the County’s temporary shift to remote work in response to COVID-19.Worked with internal audit to assess process effectiveness and track gap remediation.Assessed risk in the form of reviewing changes, new initiatives, potential purchases and contracts.Represented Gwinnett County IT in the UASI federal grant program and lead the cyber security working group.

Atlanta, Ga, Us

In this role I lead the Security Operations team in Atlanta and Nashville offices which was responsible for monitoring, responding to incidents, penetration testing and maintaining systems which supported the security team. • Deployed Splunk as a SIEM to monitor systems, alert on potential incidents based on indicators of compromise, and provide daily dashboards.• Analyzed logs and conducted threat hunting to identify potential incidents. • Lead technical incident response activities as necessary.• Improved employee awareness by conducting phishing simulations using open source solutions (GoPhish). • Conducted internal penetration tests using Kali Linux and Metasploit.• Lead vulnerability management efforts by deploying and maintaining Tenable products and automating Jira ticket creation based on findings.• Assisted the Site Operations team with monthly patching by applying patches to 100+ development systems for testing.• Maintained approximately 50 RedHat / CentOS linux systems which supported the operations of the Security team, leveraging ansible automation when possible.• Delegated tasks among team members to meet assigned objectives.• Identified areas of improvement within the team and contributed to the overall security strategy.• Provided input on job descriptions, responsibilities and hiring decisions.• Worked with VP level positions to provide security engineering and threat expertise.• Assisted compliance efforts in pursuit of HITRUST certification.

Lawrenceville, Ga, Us

At GGC I reported directly to the CIO and was responsible for establishing a information security program at a recently created public college. This included creating policies and procedures as well as implementing technology. Specifically: • Implemented Snort IDS and a centralized logging server to assist in detecting security threats.• Established vulnerability management using Tenable Nessus.• Performed password brute force cracking which led to the implementation of a password complexity policy.• Worked with GGC Human Resources to establish an off-boarding process that ensured employee access was disabled appropriately upon termination.• Tested system security through basic penetration testing.• Working with the network team, built a FreeRadius system to convert wireless security to 802.1x instead of a captive web portal.• Improved mobile device security by implementing PIN requirements through BES and MS365 policies.• Used bash and expect scripting to automate tasks such as incident response and network administration.• Assisted in network administration by managing Cisco switches, firewalls and wireless as well as CentOS based NTP/DHCP/DNS servers. • Lead preparation and response to USG IT audits.• Completed the annual PCI-DSS self assessment questionnaire. • Worked with GGC's Legal Department in employee investigations and terminations.• Created an annual security awareness course for faculty and staff.• Managed student interns to build their skills and accomplish day to day tasks.• Where possible, leveraged open source solutions to reduce budget.• Continuously built skills through certifications, classes, conferences and self study.

• Built ASP based websites to market for specific keywords.• Performed basic HTML based design for email marketing campaigns.• Managed pay per click advertising accounts.• Trained new employees in SEO and PPC Advertising.

Atlanta, Georgia, Us

• Assisted IT staff in daily tasks including monitoring for policy violations, configuring new servers and daily trouble tickets.

Bba, Computer And Information Systems Security/Information Assurance

Other; Certificate In Organizational Leadership