Michael Panico Email & Phone Number

Austin, Texas, Us

Head of Information Security (CISO) for a tech forward Health Insurance Plan with no deductibles or co-pays. Created an information security program from scratch that provides security SME across the design, build and run phases of system implementation. Supports cloud-native software products, big data initiatives and workforce security. Deeply involved in the strategy, architecture and delivery of a Zero Trust approach which pivoted the organization to a more secure workforce by taking advantage of IAM features like Modern Auth and ABAC, instituting a Secure Service Edge, and enhancing auditing and logging for incident detection. Implemented a BYOD program. Instituted a data governance program, operating across teams to identify risks, develop policies and deploy processes to ensure data is protected appropriately, while still allowing the business to thrive.

New York City, Ny, Us

Business Area ISO for NBC Universal's Global Media Operations and Engineering team, which packages, prepares, and distributes all of our content. Includes Broadcast, OTT, TV Everywhere, and B2B delivery for VOD, SVOD, MVPD, EST, et al.

Burbank, Ca, Us

Burbank, Ca, Us

Responsible for all aspects of security (physical, infosec, content protection) at Lucasfilm.

Burbank, Ca, Us

Responsible for managing a team that provided Security Engineering, Vulnerability Management and Incident Response and Forensic services to WB. Also served as trusted advisor to CISO on numerous security projects on roadmap. Provided architectural and operational advice and headed up cloud and BYOD initiatives. Spearheaded an retooling of cyber security controls and architectural redesign in the wake of the SONY breach.

Burbank, Ca, Us

Managed teams responsible for securing WB's online services, including B2C and B2B products.

New York, Ny, Us

Engagement Manager providing oversight on numerous and varied digital forensic investigations, data breach response, eDiscovery projects, and risk assessments for Fortune 500 companies.Specialized in critical incident response; served as a trusted advisor to senior and executive management at victim companies on response and remediation activities during and after serious data breach incidents, including numerous APT related attacks. Developed investigative strategy, conducted forensics and led technical response teams. Authored reports and served as liaison with outside counsel and law enforcement agencies.Assessed and audited information systems at cutting-edge enterprises to design secure architectures and develop control sets to mitigate identified threats.

Redmond, Washington, Us

Created and led CERT function for Microsoft’s Online Services; responsible for the security of over 200K hosts in one of the largest enterprise IT deployments in the world; our global datacenter infrastructure supported more than 200 varied online businesses, including BING™, Hotmail™, Windows Live™, HealthVault™ and Office365™. Managed 20+ employees and vendors engaged in providing Vulnerability Management, Security Engineering and Operations, and Incident Response service to our internal clients.Programs under my supervision included: network level and web application penetration testing, vulnerability scanning and patch management, deployment of the anti-virus infrastructure, and the centralized collection and analysis of log and other data from servers, network devices, and security devices for both incident detection and decision support of senior management (SIM).Developed the technical solutions, processes, and programs to deliver control activities for the above functions in support of multiple successful compliance efforts, including ISO 27001, PCI DSS, FISMA and SAS70. Worked closely with Microsoft’s Health Solutions group to provide specialized and customized technical security controls in support of HIPAA and HITEC compliance for HealthVault™ and Amalga™; expanded standard service offering to meet requirements with little cost overhead. Worked closely with Windows Azure™ and other components of Microsoft’s Cloud Computing ecosystem to port and adapt the technical security controls from GFS to those environments effectively and efficiently.

Redmond, Washington, Us

Created Incident Response Team from scratch, based on NIST, ISO and other best practices in conjunction with experience; authored all documentation, staffed, trained, and equipped team to perform this function. Created engagement models within a complex security ecosystem at MS to leverage capabilities and reduce resource requirementsIdentified the strategy to provide the appropriate detective controls for incident detection across complex and dynamic environment; effectively used resources to provide the coverage necessary to mitigate risk; oversaw development of log management and correlation logic to alert Incident Responders to suspicious activityResponsible for the deployment of an enterprise-wide remote forensic imaging program and process using commercial tools for under $10K per annum. Won VP excellence award and multiple spot awards for efforts; IR function has passed multiple audits with flying colors.

Redmond, Washington, Us

Washington, Dc, Us

Led a computer intrusion "fly team" (the Cyber Action Team Unit) sourced out of FBIHQ.Participated in numerous international hacking cases with colleagues from Federal LE in Germany, England, the Netherlands, Interpol, etc. Helped direct resources and provided oversight on the "Zotob" botnet criminal case. Selected as team member for two deployments on behalf of the US government to consult on cyber security for the Olympic games in 2004 and 2006.

Washington, Dc, Us

• Investigated an international conspiracy of hackers who targeted commercial websites using botnets, causing over $2M worth of damage from Denial of Service attacks. Pioneered investigative and analytical methods to identify perpetrators and collect evidence for this type of crime, resulting in the conviction of six subjects. First case of its type to be investigated and prosecuted successfully in the United States.Investigated a broad variety of cybercrime cases to include Intrusions, Internet-related frauds, and Intellectual Property Rights violations. Investigated complex fraud schemes targeting Medicare and Medicaid health care insurance programs. Oversaw an initiative targeting fraudulent primary care clinics in Los Angeles County, developed the strategy and procedures to investigate this type of fraud, resulting in the conviction of over 10 individuals, recovery of over $2M.

Washington, Dc, Us

Held ranks of Lieutenant and Captain. Rifle and Weapons Platoon Commander in Kilo Company, 3rd Bn, 3rd Marines