Management and implementation of Information Security for Network Service Provider. Leader of CSIRT. Systems and applications support of large scale distributed Linux systems and CDN/Content Delivery Network. Provide 24/7 oncall support for SOC / Systems and Operations Center. Perform expert level forensics, incident management and response. Manage Content Delivery Network provisioning of accounts. Act as a liaison for information security across multiple teams including NOC, SOC, Managed Hosting, IPops, Legal, Audit.

Security risk consulting, risk mitigation, assessments, and IT auditing for a variety of standards and regulations including SOX 404, COSO, COBIT, HIPAA, GLBA, PCI, and SAS70 type I / II for West Coast region [CA, OR, CA, ID, UT]. Led a cross-functional team of IT Associates for the Seattle and Portland office. Worked with internal and external auditors to mitigate, document, and test threats and risks. Evaluation and recommendation of pervasive and process level controls including performance, restriction of systems and data, segregation of duties, change controls, backup capabilities, transaction/document control, reconciliations, and mitigation of risk.

Network hardening and auditing including LAN/WAN services, passwords, permissions, protocols, AD, traffic flows, and interfaces with 3rd parties using manual and automated tools and techniques. Perimeter hardening and auditing including routers (CISCO), switches, firewalls, Intrusion Detection Systems, Domain Name Servers, email and proxy servers, and multi-tier web/E-Commerce servers. OS hardening and auditing for platforms including Linux, OS/400, Solaris, HP-UX, AIX, Win32, and NOVELL. Forensics analysis of hard drives and network incident response using Helix Linux, Autopsy, Sleuthkit, TCT, Database hardening and auditing for SQL, MySQL, LDAP, and Oracle, focusing on areas including segregation of duties, error message handling, CIS benchmarks, privilege level, and input validation.

White box and black box testing of firewall hardware and software. Maintained cross-group collaboration with developers, architects, and customer support to identify and report product and quality metrics. Implemented and tested firewall policies according to customer’s trouble ticket scenarios. Compatibility testing of Watchguard series firewall with VPN clients. Integration and regression testing, HA failover, syn flood, and individual services testing. Implemented tools for testing VPN’s, IPSec, and encryption key management for Watchguard series firewall. Watchguard Certified.