● Designed, Launched and Pioneered a Network Access Control Program (Forescout NAC)○ Applied NAC to manufacturing floor to secure all IOT/OT technologies.● Transformed and reworked current CIRP (Cyber Incident Response Plan) to be inline with NIST 2.0 Standards. Trained both lower level and Executive level on their roles and responsibilities. Ran tabletops so staff would have familiarity with program.● Remodeled outdated Vulnerability program. After reworking the program, remediated/accepted All External Vulnerabilities by 100% and remediated/accepted Internal Vulnerabilites by 30% working towards full remediation.○ Responsible for Monthly meeting/reporting to DIR/VP, including presentation, findings and recommendations to move forward. ● Instituted a Security Tool Compliance Metrics, and increased all security tools to 100% across all systems both legacy and modern.● Coordinated and led the review of over 20 vendors, improving the vendor mix and reducing dependency on single sources by 25%● Using a Vendor Managed SIEM, we increased its visibility into our network by 30% using new log sources and creating custom rules for alerting.● Completed multiple 3rd party Vulnerability Assessment including Red Team, Purple Team and Assumed Breach and created remediation plans inline with findings.● Designed and implemented network segmentation through Guardicore.

Cyber Security Program Development• Researched, designed, and implemented a comprehensive cyber security program that included the following key components:o Risk Assessment: Conducted thorough assessments utilizing frameworks such as NIST and ISO 27001 to identify potential vulnerabilities across IT infrastructure, leading to prioritized remediation efforts.o Threat Modeling: Developed threat models using STRIDE and PASTA methodologies to systematically analyze and mitigate risks associated with critical assets.• Security Architecture: Designed a multi-layered security architecture that integrated:o Firewalls and Intrusion Detection Systems (IDS): Configured and optimized firewalls and IDS solutions to detect and prevent unauthorized access.o Endpoint Protection: Deployed endpoint security solutions (e.g., CrowdStrike, Symantec) across all devices to safeguard against malware and advanced persistent threats (APTs).• Policy Development: Created and implemented security policies and procedures aligned with organizational goals and compliance requirements, such as GDPR and HIPAA, ensuring that all team members understood and adhered to security standards.• Training and Awareness:o Developed comprehensive security awareness programs that included phishing simulations and hands-on workshops, resulting in a 30% increase in employee compliance with security protocols.• Monitoring and Incident Response:o Established continuous monitoring practices using Security Information and Event Management (SIEM) tools to analyze security events and detect anomalies in real-time.o Developed an incident response plan that outlined clear protocols for responding to security breaches, minimizing potential damage and ensuring swift recovery.• Continuous Improvement: Conducted regular reviews and updates of the security program based on threat intelligence and emerging cybersecurity trends, resulting in a 20% improvement in incident response time over six months.

• 24/7 Security Monitoringo Security Operations Center (SOC) - Log Management and Analysis - Threat Intelligence Integration• Incident Responseo Incident Triage - Investigation and Forensics - Response and Recovery• Vulnerability Managemento Vulnerability Assessments - Penetration Testing - Patch Management• Security Information and Event Management (SIEM)o Centralized Data Collection - Real-time Monitoring and Alerts - Compliance Reporting• Network Securityo Firewall Management - Intrusion Detection and Prevention Systems (IDS/IPS) - Network Segmentation• Endpoint Securityo Endpoint Detection and Response (EDR) - Data Loss Prevention (DLP) - Mobile Device Management (MDM)• Compliance and Risk Managemento Regulatory Compliance Assessments - Policy Development - Risk Assessments• Security Consulting and Strategyo Security Framework Development - Executive Reporting and Insights - Security Awareness Training• Threat Intelligenceo Threat Intelligence Gathering - Proactive Threat Hunting - Integration with Threat Intelligence Platforms• Managed Detection and Response (MDR)o Behavioral Analytics - Continuous Monitoring and Response - Integration with Existing Security Tools• Cloud Security Managemento Cloud Security Posture Management (CSPM) - Identity and Access Management (IAM) - Data Protection in the Cloud• Data Protection and Encryptiono Data Encryption Solutions - Backup and Disaster Recovery Planning

Troubleshot, Maintained, Calibrated, and Operated the Missle Guidance Systems for the Ballistic Missle Defense program.Combat Experience in Vessel Boarding Search and Seizure