Paul Tobia Email & Phone Number

Redwood City, Ca, Us

I am a product manager for the security portfolio of Sumo Logic focusing on threat detection and content including integration of the MITRE ATT&CK Framework. My product has been in the Gartner MQ for SIEM two years running (2023 Visionary; 2024 Challenger). Responsibilities include:- Development and management of customer focused product features from concept to launch- Drive customer roadmap and feedback sessions- Coordinate and prioritize development projects on a quarterly basis- Prioritize and triage customer support backlog

Redwood City, Ca, Us

I assisted customers pre- and post-sales in evaluating and implementing a cloud native log analytics and SIEM product into their operational processes. Also provided consulting internally to grow the security culture at my company.

In addition to the previous role's responsibilities I developed and internally promoted operations manager roles to more closely assist day to day SOC operations. Also refined the internal role structure of the SOC to improve retention and enhance the career development of the analysts.

Managed and grew a team of security analysts providing 24x7 security monitoring services for over a hundred customers. The team was responsible for correlating, analyzing, and triaging thousands of alerts then investigating the valid alerts and providing customers with detailed and actionable notifications.I also led efforts of continuing improvement in personnel and career development, process development and execution, and tools acquisition and usage which resulted in a small team producing a consistent average of 140 high quality notifications per week.

San Diego, California, Us

Member of the leadership team of an integrated health care delivery network covering six hospitals, over 30 physician offices and over three million active patients. Providing process improvement in many areas to increase efficiency in team operations. * Developed fiscal strategic plan to include a balance between risk and compliance with cyber and intelligence projects and operations.* Responsible for the engagement with the managed security services provider performing log management, IDS and firewall monitoring and management and 24x7 SOC operations.* Implemented quarterly ongoing vulnerability management system scanning, validating and remediating over 1,200 production systems per quarter.* Developed proposal for implementation of SIEM system to perform core technical capabilities of a 24x7 security operations center.

San Jose, California, Us

Responsible for providing guidance to Symantec clients in the areas of overall security program maturity and resilience to sophisticated attacks leveraging a combination of next generation security program concepts, advanced security intelligence capabilities, and mastery of security fundamentals.* Provides evaluation, assessment and recommendations for Fortune 1-1000 security programs.* Provides practical security program improvements based on resources and abilities to improve the maturity of customer security programs.

San Jose, California, Us

A trusted advisor to security executives, business leaders, and IT executive provided security strategy and direction, governance and compliance, industry trends and threat landscape evolution, and best practices from a world-class Security Business Practice organization directly supporting the business goals of a $6 billion Fortune 500 software company. As an extension of Symantec’s CTO Office, Paul works closely with Symantec’s Security Business Unit Executives, Sales Organizations and Customers.

San Diego, Ca, Us

Responsible for the development and delivery of a comprehensive information security program for an integrated healthcare delivery network of seven hospitals, two physician groups and a health insurance plan. The information security program covers over 3M patients' medical records and financial information. Managing a combined operational and capital budget in excess of $1.5M annually. * Information Security Officer responsibilities for a workforce of over 14,000 people including regulatory compliance with HIPAA/HITECH, California medical and personal privacy laws, and PCI-DSS. * Designed and oversaw implementation of two-factor authentication for a patient portal serving >50k consumers. * Implemented formal risk management process tracking opertional and strategic risks driving the interaction between information security and IT. * Provided oversight for vulnerability management program scanning >10k network addresses including patient care areas on a monthly basis. * Provided leadership for quarterly county-wide meeting of healthcare information security professionals.

San Diego, Ca, Us

Responsible for ongoing management of IS Security program. Hired and trained a team of security architects to manage program operations. Provided information and action plans to IS leadership to manage information security risk across the enterprise. Provided education and awareness for information security responsibilities to the all roles within the company. Drove ISD involvement in security investigations interfacing with the HR and Compliance departments. * Developed the security team from a single engineer to include a manager and four architects providing dedicated information security support to the corporation. * Oversaw implementation of a data loss prevention solution covering over 20 gigabytes of email and web data per day. * Implemented and then chaired information security advisory committee with representation across the corporation to provide guidance and alignment with business objectives. * Developed initial security architecture for the hospitals' new electronic medial record system.

Kansas City, Missouri, Us

IT Security manager implemented corporate IT security initiatives in direct support of business objectives and regulatory requirements. Member of the Corporate Security management team that developed and managed the company-wide information security program. * Designed yearly plan for information security projects and process improvements to meet business goals. * Supervised a team of four security engineers and four operations staff responsible for security risk management, incident response and implementation of new projects and processes. * Designed and implemented a company wide Public Key Infrastructure project meeting WebTrust for Certificate Authorities standards. Project completed with 17 correctable errors our of 810 documented steps.

Kansas City, Missouri, Us

Responsible for the information security and oversight of the physical security for the Lee's Summit remote hosting data center containing over 4,000 sq. ft. of raised floor. * Designed security architecture to protect data center systems storing and processing personal health information. * Created security related documentation and presentations for clients and medical professional groups. * Performed internal security breach investigations on client and corporate systems resulting in closing the breach and identification of responsible parties. * Trained security concepts and implemented security projects across multiple groups including Engineering, IT Management, Regulatory Affairs, Sales and Marketing, and Legal.

Kansas City, Missouri, Us

Assisted corporate business partner in the development and implementation of security processes for joint venture and communicated security concepts to clients. * Provided HIPAA technical expertise an consulting for internal groups including Regulatory Affairs, Engineering, business partners, and clients. * Developed and taught HIPAA training program to both company and business partner employees (+50 people).

Kansas City, Missouri, Us

Managed corporate network security solutions with an emphasis on the internet and other external network connections. * Primary administrator for firewalls, DNS, email gateway, ftp, vpn, and other internet services. * Participated in core network team to upgrade corporate network to switched LAN with ATM backbone. * Managed corporate initiative to roll out internet access to all employees (>2,000 people with 99.8% satisfaction.)