Nick Corn Email & Phone Number

Atlanta, Ga, Us

Atlanta, Ga, Us

Atlanta, Georgia, Us

At CodeMettle I am responsible for the security of both our internal corporate networks and our software products. I work every day with engineering and company leadership to ensure the continued secure operations of the business as we work to develop software that can not only function in highly secure networks, but also do so in a way that does not cause undue burden onto the end user.In my role as head of operational security, I am responsible for the security of our organization. I also ensure compliance with various regulations and frameworks specific to the defense industrial base including DFARS, NIST and the forthcoming CMMC 2.0 rule. I focus on delivering security that works for our end users and not against them. I also lead our CISO Committee efforts by ensuring that senior leadership is informed on the impacts security and compliance will have on the business as the business continues to scale and grow. As head of product security, I am responsible for how we go through the SDLC and shift security left as far as possible within said SDLC. Through a combination of design reviews, weekly developer security collaboration, and security automation, we ensure our products are as secure as possible when they leave our infrastructure and are installed on customer systems. I've also worked to ensure our software products meet the stringent compliance needs of the DoD and various branches of the armed forces.I also have the pleasure of leading an incredibly talented team of security professionals as we work to achieve these goals. I ensure that the work they are doing aligns with their career development aspirations while also providing mentoring and feedback whenever possible to bolster them further while at work. As a manager, it is my responsibility to remove obstacles and ensure my team can continue to protect the information we are entrusted with as an organization.

While at Ionic Security, I have had the opportunity to work with and research a wide range of cutting edge technologies in order to further our companies goal of being the preeminent trust management platform in the world. I primarily function as a penetration tester for our external network and all in house produced code, but also as a security and privacy advisor to the engineering teams creating the software that drives our core business. As we create various SDKs, I have experience testing and researching a wide range of languages including but not limited to Go, Python, JS, and many others. Once an issue is discovered, I am responsible for ensuring the teams responsible are properly informed on its severity, and for coordinating our response.I also assist in the organizational response to any customer or externally reported vulnerabilities. Typically this includes researching our implementation of a particular subsystem or library to determine if our use case matches up with whatever the particular use is, and then driving our response to said issue to completion.Lastly, I also review and evaluate our produced products to ensure proper compliance across legal, contractual, and other obligations. I provide input whenever necessary to contractual language whenever a penetration testing clause is raised within the legal document in question.

Atlanta, Georgia, Us

At Meditology I have worked with a wide variety of clients across the entire healthcare industry. I primarily have been focussed on technical assessments of client information security posture.I work as the primary web application assessor for the firm performing web application penetration tests against multiple type of web applications. I have a wide knowledge of web application design and security. I worked to integrate the OWASP testing standards and guidelines into our existing processes to improve the quality of our assessments.I also serve as a penetration tester on more standard ethical hacking engagements. I work with other team members to successful infiltrate and steal data from an authorized client in a simulation of what an actual attack would look like.I have worked with a client to develop and upgrade their risk management program with a focus on ensuring any solutions brought into the environment are assessed correctly and promptly with the procedures thus defined. I worked to engage business owners across the organization in the information security process as well as training the existing information security team in risk assessment methodology and procedures.I have participated in a wide variety of security risk assessments and audits. I am very knowledgeable in several frameworks and regulatory requirements such as NIST, HITRUST, HIPAA, and ISO.

Kennesaw, Ga, Us

I was responsible for securing all aspects of the organizations Information Technology Infrastructure. I hardened services to prevent leaks of confidential information as well as developing a robust Information Security Policy that matches the Technical Controls in place. I managed the information security program and advised senior leadership on the need for information security and how to better secure the business in ways that aligned with the organization's goals.