• Technology Architecture, Administration, and Support• Information Security, Business Continuity, and Incident Response in a high-risk environment• Physical Security Control Administration, Monitoring, and Response• Live Studio Broadcast Monitoring, Response, and Support. Rumble, YouTube, and X

¯\_(ツ)_/¯

IS Monitoring Lead - October 2019- August 2021• Directed Information Security Monitoring (SOC) operations for 600K+ users and workstations, 50K+ cloud servers.
• Modernized Triage (Tier 1) and Investigations (Tier 2) teams, building 24/7 response capability from Chicago, Bengaluru, and Buenos Aires. 
• Drove false positive reduction effort, analyzing trends and tuning controls to reduce FPs by 60% over 6 months with no loss of confidence.
• Proposed, POC’d, architected, piloted, and managed deployment of Attack Surface Reduction controls on global enterprise endpoints and servers.
• Led initiatives to expand alerting capabilities, standardize user interactions, improve leadership reporting, and implement automation that reduced manual efforts by 30% while improving customer satisfaction.Threat and Vulnerability Management Sr Manager - April 2017 - October 2019• Lead Instructor for Security Analyst School, a recurring 2-week bootcamp for new Security Analysts focusing on technical security, business offerings, and soft skills such as client presentation preparation and delivery. 
• Created and taught new technical content for Cybersecurity Fundamentals Bootcamp, a 2-week lab course on security technologies.
• Business development, sales support, and delivery management for Threat and Vulnerability Management projects for Fortune 100 customers.
• Managed client relationships, created proposals, and led delivery on technical security assessments, penetration tests, and control audits.
• Founding member of autonomous systems practice. Ran semi-autonomous UAV inspection and monitoring POC’s for forestry and power clients. 
• Security Engineering SME for Accenture's largest energy client, supporting Advanced Metering Interface (AMI) and Field Area Network (FAN) rollouts in 4 states. Reviewed security models, enforced control requirements, and performed risk and threat analysis. Discovered multiple vulnerabilities in NERC/CIP OT environments.

• Researched and presented customized threat assessment decks for Fortune 100 clients using current threat intelligence.
• Produced pre-sales client presentations, tabletop assessments, and architecture reviews for engagements up to $10M.
• Backstopped Adversary Simulation teams as a technical SME and customer liaison, driving NPS scores above 85%.
• Created and delivered conference talks on SOC operations, security culture, privacy ethics, and kittens at B-Sides and Q-Center.
• Acquired by Accenture in 2017, now part of Accenture Security.

• Grew Technical Security Consulting organization from inception with 4 consultants doing $100k/month revenue to 30 consultants and $2M/month. Grew average engagement size from $5k to $75k through development of value-added services and customer targeting.
• Founded Red Team, Penetration Testing, Vulnerability Assessment, and Application Security teams, focusing on delivering accurate, actionable recommendations for clients. Achieved NPS scores above 80% across all four teams with a unified QA process.
• Developed and spun off GRC/Audit and Incident Response teams, each growing beyond $1M/month revenue.

• Delivered technical security assessments, penetration testing, vulnerability assessment, wireless and physical security assessments.
• Delivered GRC assessments based on PCI DSS, HIPAA, SOX, and ISO27K for large enterprise clients. QSA for one of the world's largest retailers. 
• First-on-the-ground incident handler for two major breaches, involving personal information for over 100M individuals combined.
• Recruited by SecureWorks to build a new consulting organization to service ex-VeriSign GSC customers after MSS acquisition in 2009.

• Deployed endpoint and network intrusion detection systems. Built custom log vaulting and event correlation systems with open source software.
• Managed Security Operations (SOC) and Security Administration teams for 1500 users and on-premise datacenter. 
• Lead Incident Handler for internal bound-book IR. Testified in two criminal cases stemming from AUP violations flagged by correlation engine.
• Performed corporate and physical security functions as a liaison with Mountlake Terrace PD (me being off-duty Lynnwood PD at the time).

• Project manager for Washington Mutual's Occasio branch transformation, rebuilding OS/2 and AS/400-based financial networks at 3000 locations. 
• IBM's highest on-site after-hours presence at Washington Mutual HQ. Co-ordinated Tier-3 technical assistance for remote branch migration teams.
• Regional transformation lead for branches in Salem, Lake Oswego, and Eugene. Onsite team management with final go/no-go/back-out authority.

• Senior Network Engineer for government IT VAR. Network architecture, build-out, and contract administration for local SMB grants. 
• Field engineer for regional hospital chain. Ran technical dispatch, maintained central parts depot, supported field technicians doing warrantee swaps.
• IT QMC technician for aircraft manufacturer. Desktop/CAD support, network cabling, and warrantee break/fix.
• IBM System/38, AS/400 mainframe administrator for regional bank. IBM OS/2 desktop support and Novell NetWare admin. 
• Overnight help desk manager for regional dial-up ISP. End-user telephone support getting people online in the age of AOL. At night.
• PalmOS/Handspring contract developer. Created several reference companion apps for tarot artists and tabletop gaming stores.
• Hazardous materials technician, equipment operator for chemical manufacturer. Extracted IT equipment for decontamination and recovery.
• Electrical technician for lift truck manufacturer. Diagnostics and repairs for IC boards. Hazardous materials specialist.
• Olivetti word processor technician for state government. Created surplus XT/AT refurbishing program for rural schools.
• Freelance C/KU-band (analog) satellite dish sales and installation. Receiver and descrambler programming.
• Family restaurant heir, manager, and busboy. All aspects of small business ownership. 2 years formal culinary school and bartending certificate.