Michael V. Email & Phone Number

New York, Ny, Us

Manage and lead security operations program consisting of threat detection and response functions (specialties including threat detection, incident response, threat intelligence, and threat engineering) and Sarbanes-Oxley (SOX) User Access Management (UAM) function. Manage operational budgets used for cloud spend, including logging architecture and pipeline, SIEM, and detection/response tools. Oversee internal security operations program that protects against cyber threats, respond to potential cyber incidents, and delivers access management for SOX compliance.Deploy security information and event management (SIEM) platform in Azure consisting of Azure Event Hubs, Azure Data Explorer (ADX), Azure Log Analytics, Microsoft Sentinel, and Azure Logic Apps. Direct teams in providing support for compliance requirements of programs to fulfill certifications, including SOC 2, ISO, HITRUST, FedRAMP, and Cyber Essentials (Plus). Use multiple solutions with focus on Infrastructure as a Service (IaaS) solutions and capabilities. Test plans through annual table-top exercises.Provide quarterly audit compliance requirements and evidence for Access Management. Monitor alerts and threats to UiPath systems and data that exist in Microsoft Azure, Google Cloud Platform (GCP), Amazon Web Services (AWS), and corporate computing systems. Lead and direct incident response through cyber incidents and data breach incidents activities organization wide. Consult with legal counsel, outside legal counsel, data protection officer, and peer teams as part of response. Team with Intelligence provider to create priority intelligence requirements.

Columbus, Ohio, Us

Provided strategic leadership over programs and functions that included threat detection, incident response, cyber threat intelligence/hunting, penetration testing, cyber-DevOps/automation, and vulnerability management/response. Led and mentored 12 professionals across 5 teams and functions, guiding in areas of business and enterprise perspective, communication, presentation awareness, and technical leadership.Generated and analyzed cyber metrics to understand progression and regression, as well as coordinate target activity. Managed detections from technologies including (but not limited to) Data Loss Prevention (DLP), Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), and Secure Email Gateways (SEGs).Developed numerous incident response and threat scenario procedures and workflows. Owned relationship with Managed Security Services (MSS) and Managed Detection and Response (MDR) services providers, leveraging third party to consume, analyze, and triage events providing 24x7 coverage. Managed relationships with third party services to perform penetration testing. Conducted negotiations of vendor contracts. Examined strategies for reducing budgets and addressing capital and operating expense needs. Addressed roadmaps and aligned priorities based on expected funding. Provided detailed budget requests and ensured budget compliance.

Dublin, Oh, Us

Provided leadership to Vulnerability Management team accountable for execution of 4 programs – Vulnerability Management, Offensive Security and Penetration Testing (Pen Test), Data Loss Prevention, and Cloud Access – serving for 120,000 IP addresses across 60 countries worldwide and in public cloud offerings in Amazon Web Services and Google Cloud Platform. Serviced internal technology teams across organization. Created budget charters for fiscal year planning and budget requests.Led team in catapulting Cardinal Health to reach goal of implementing top 5 CIS security within organizations. Deployed CIS templates to all systems to evaluate compliance with controls. Worked with application developers for penetration testing to ensure security for deployment and use. Monitored vulnerability posture and drove risk remediation. Provided solutions for cloud app access and monitored privacy data for potential loss or breach.➜ Took initiative to drive effort to provide clear understanding and visibility into Cardinal Health’s legacy operating system deployment following “WannaCry” ransomware attack event. Led remediation effort – found owners of all legacy operating systems and determined plan, costs, and expected timeframes for decommissioning of legacy operating systems. Oversaw dashboard building by working with Tableau team and leadership.➜ Took over Cardinal Health’s penetration testing program. Built engagement processes, developed budgeting, built vendor relationships, and helped team acquire specific applications to enable program.➜ Led Offensive Security team during initial growth activity internally; managed relationships for third parties leveraged for penetration testing activity.

Dublin, Oh, Us

Led team while managing incident response, cyber automation, and cyber threat intelligence program. Provided 24x7 support for potential cyber threats and risks globally. Trained staff on use of traditional technology tools.➜ Introduced security orchestration, automation, and response toolset credited with saving $5 million and slashing Incident Response team inbox to zero reported abuse emails, while reducing mean time to respond of security events by 4 hours per event. Achieved significant cost avoidance by eliminating additional staffing needs. Reduced risk by ensuring timely analysis of security events. Negotiated 60% savings from list price.➜ Coordinated transition to leverage new SIEM internally and selected partner to provide hybrid MSSP service, which allowed data to remain internal and content built in new SIEM to qualify as intellectual property of Cardinal Health. Achieved more integrated soc and incident response workflow.➜ Initiated cyber threat intelligence program, increasing employees’ understanding of cyber risk and threats.➜ Collaborated with top defense contractor on 2-year period project to build standards and procedures for active cyber activities, which included incident response, threat management, malware analysis (static and dynamic), and threat intelligence collection/dissemination. Produced roles and responsibilities for team job functions, expected knowledge sets and future job roles to expand team capability, and roadmap increase team effectiveness by transforming reactive to proactive stance.➜ Directed SIEM project ($4.8 million cost over 3 years) as management lead. Drove project, successfully meeting expected outcomes of IS organization. Supported enhanced visibility and analytics with data to visualize statistics and identify anomalies.➜ Significantly reduced security risk across organization through deployment of technical controls to secure local admin accounts to 40,000 workstations.

Dublin, Oh, Us

Supervisor in Client Systems Management focusing on Messaging Services including Email, Mobile Email, Email Security and Enterprise Fax.➜ Played key role in integration of 22 entities involved in mergers and acquisitions in 24 months, executed each within 30 days.➜ Facilitated creation of Cardinal Health’s “Rise” leadership program, becoming company standard leadership development.

Dublin, Oh, Us

Engineer, Client Systems Management | Messaging Services (December 2011-November 2012)Senior Analyst, Messaging Services | Client Systems Management (September 2010-December 2011)Analyst, Messaging Services | Client Systems Management (December 2009-September 2010)