Chris Newton Email and Phone Number

Cloud Security- AWS & Azure security governance- Cloud Security Posture Management (CSPM)- Security automation and reporting (Lambda, GitHub Actions, etc.)- Data Privacy & SecurityApplication Security- Comprehensive security testing, remediation, and real-time protection for healthcare applications (SAST, SCA, DAST, IAST, RASP, etc.)- Container security- Secure Application DesignIdentity & Access Management- Enterprise SSO & MFA- HIPAA, HITRUST, SOC 2 compliant access review program- Privileged Access Management

Designed and implemented multi-cloud (AWS and Azure) security standards, build templates, continuous monitoring, and automatic compliance for 5th largest AWS environment.

Documentation of security requirements by assessing business strategies and requirements, researching information security standards, conducting system security and vulnerability analyses and risk assessments, studying architecture/platform, identifying integration issues, and preparing cost estimates.Developing requirements and strategies to address information security needs and overseeing projects through the implementation phase.Working with the various information security team members and information technology teams to ensure changes to new or existing technologies are assimilated and functioning correctly.Defining security requirements for information technologies and solutions.Partnering with other technical architects to ensure consistency for Enterprise Architecture processes and practices.Ensuring that information security controls meet the requirements of all regulatory and/or contractual requirements.Researching new and emerging technologies to evaluate technical trends and requirements.Participating and providing evidence in information technology compliance activities in support of internal and/or external audits.

Conducted attack and penetration assessments and specialized technology assessments (firewall rule reviews, infrastructure configuration reviews, vulnerability analysis). Provided actionable, business oriented recommendations to CISOs, CIOs, CFOs and Boards in order to improve their information security programs based on the outcomes of assessments.Worked with clients in a number of industries, including healthcare, financial, media, and aerospace and defense.Developed training and reference materials related to penetration testing, specializing in network based attacks.Assisted with ISO 2700X implementation across multiple industries.Led IT governance and Third Party Risk assessments related to security policy, access control, physical security, social engineering, and data protection for a number of industries including healthcare, software development, utilities, and aerospace and defense.

- Site Lead for the Plant 42 Global Hawk Production Facility Ground Segment- Managed personnel and technical resources in direct support of flight test and Air Vehicle sell-off accreditation program- Coordinated surge staffing with Program Managers: Led between two to ten Field Engineers based on weekly testing needs- Maintained 100% effectiveness rating while training nine new Field Engineers- Created and implemented classified security safeguards for four Global Hawk Ground Segments in accordance with DoD and National Security Agency (NSA) standards- Primary software expert for flight tests of new Global Hawk Unmanned Aerial Vehicle (UAV) software- Pinpointed specific problems within software, identified solution to development teams- Led implementation of seven new platform software revamp and baseline installations- Collaborated on design and created configuration and maintenance documents for experimental UAV Command and Control over Wide Area Network (WAN) - Local Area Network (LAN) and WAN Specialist- Designed and implemented Campus Area Network (CAN)/WAN links for test and integration between DoD, Defense Information Systems Agency (DISA), and civilian systems using tiered network designs to implement segregation and segmentation of resources- Integrated control systems into secure global network on CAN/WAN/LAN- Recognized as a global network problem remediation specialist by Raytheon with multiple contributory awards against a global peer group- Oversaw configuration, maintenance, and upgrade of Warfighter Ground Station Globally Integrated Platform- Completed the pre-delivery configuration of 17 GH Shelters- Configured servers, network devices, cabling, and operating system specific components for black box style heterogeneous platform- Network and system support for Global Hawk Block 30/40 IOT&E- Trained Field Support Representatives (FSR) on installation, support, and maintenance of Global Hawk Command and Control segments.

- Selected as the sole USAF Instructor to teach maintenance and operation of the Distributed Ground Intercept Facility (DGIF) intelligence hybrid cloud computing network.- Trained USAF and civilian contractors on Cisco Certified Network Associate (CCNA) level networking, UNIX, and system specific maintenance and operation.- Created, updated, and maintained over 2000 slides of training course material for a six week class.- Increased demand from two classes per year to seven, based on the perceived value of the training by the customer units.

- Coordinated installation of over $100 million dollars of networking and server upgrades- Maintained 100+ workstations and servers (Solaris 8, Linux, and Windows)- Installed and maintained communications circuits across multiple security classifications- Military cryptographic systems and security specialist for both physical and logical security of the facilities data