Michael Floerchinger Email & Phone Number

Paramus, New Jersey, US

San Mateo, California, US

San Mateo, California, US

• Core Competencies:
• Application Design Review
• Threat Modeling
• Code Review
• Web Application pentesting
• REST API pentesting

Denver, CO, US

• Web Application Pentesting
• Network Layer Pentesting
• Enterprise Assessments
• Database Vulnerability Assessments
• Router and Firewall Vulnerability Assessment
• Fortify Implementation and Code Reviews

San Diego, CA, US

• Lead security architect role dedicated to the Smart-Meter project.
• Lead senior security role, assigned to complete the objectives for the secure design, configuration, implementation and deployment of the enterprise Smart-Meter application. A critical infrastructure solution for.
• Responsible for ensuring Smart-Meter development life-cycles securely align to the security program and security policy framework.
• Develop security standards, guidelines, procedures and technical controls in support of recognized security framework standards including AMI and NERC-CIP security standards and compliance regulations.
• Consulting with business units, project management and program vendors to meet business objectives while promoting governance with the information security goals and objectives.
• Understand and manage security tasks and objectives of Smart-Meter program.

To provide information security consulting and risk management services. Services include information security assessments (ISO 27002:2007), compliance consultation (DSS-PCI), developing data security strategies and best-practice security standards, web application security services and web application vulnerability assessments.

Irvine, CA, US

• Lead security assessment role performing web application penetration / vulnerability assessments of internal and external client applications, acquisitions, B2B and B2C web applications.
• Lead security architect role performing application architecture and infrastructural security assessments including identifying and recommending security controls and processes to secure both internal and externally.
• Lead security architect role for the design of application architectures for newly developed web and business applications throughout a project or software development life-cycle.
• Perform and manage the security assessment projects for North America, Latin America, Europe, and Asia regional centers.
• Developing security processes, guidelines and standards for application development and security assessments in accordance with the organizations information security policies and compliance regulations (PCI, SoX).

US

As a Senior IT Security Consultant with Siegeworks International and SiegeSecure Inc. the core responsibilities were to provide consulting and risk management services to various organisations, both within Australia and internationally. Services included web application security services, web application vulnerability assessments, information security.

New York, NY, US

Delivering security consulting and risk assessment services to public, private sector organizations and state & federal government departments. Projects undertaken include: Security audits and risk assessments following:- ISO & AS/NZS 7799 Information Security Standards- AS/NZS 4360 Risk Management Standards- ACSI 33 Australian Communications Security.

Java Programming Certificate

Certified Information Security Manager - Cism, Enterprise Information Security Management

Security Certified Professional - Cissp, Information Security

Certificate, Business Management

Certificate, Micosoft - Mcse