Christopher G. Email & Phone Number

Atlanta, Ga, Us

San Francisco, California, Us

Keeping our games secure and insuring integrity

Austin, Texas, Us

Seattle, Washington, Us

Responsible for directly coaching and mentoring the CSIRT team and providing vision, direction and guidance on solutions to monitor, detect and responding to security incidents promptly to mitigate damage and restore service.-Lead a geographically distributed team to provide cyber security incident services to respond to security events and alerts and provide accurate and timely communications and reports.-Oversees and executes acquisitions for investigation and digital forensics activity, as well as interfacing with internal and external stakeholders.-Ensured all security monitoring and log management solutions are functioning as designed and worked with the appropriate teams to maintain and upgrade the environment as appropriate to sustain operational stability.-Identified opportunities for iterative improvements in coverage of intelligence and monitoring through existing resources; recommend and work with the team to implement improvements.

Seattle, Wa, Us

Responsible for partnering with the business and technology teams to assist in delivering secure solutions in support of their strategic roadmaps. Lead a team of Managers responsible for day to day operations, performance management, coaching and career development. Established and maintained the vision, strategy and operations specific to on premise & cloud IR/SOC space to ensure information assets, technologies, and services are adequately protected. Work closely with Product Management to prioritize and establish roadmap in align with strategic priorities.- Implemented Analyzation, Detection & Response process to identify cloud security deficiencies and non- adherence to corporate and industry standards.- Oversee the Security Operations function focused on the identification of vulnerabilities across Expedia, Inc. leveraging Static Code Analysis, Dynamic Code Analysis, Network Firewall Rule Management, Qualys Vulnerability Scans, and Data Loss Prevention systems.- Fostered a team culture of continuous improvement, mentoring and learning, data driven decisions, and accountability for delivery of key metrics and deliverables without sacrificing security- Partner and collaborate with business and technology teams to ensure security scans encompass the breadths and depth necessary to ensure consistent and defensible security posture for Expedia, Inc.

Seattle, Wa, Us

-Out of the box and innovative approach to limiting the impact of tomorrow's security threats.-Executive manager for Security Operations & Security Engineering including remote security operations analyst-Overseeing cloud security operations, deployment and control measures -Cloud endpoint security architecture, implementation, configuration & management-Advanced Firewall, IPS and WAF configuration, management, and integration.-Security Incident Response Commander and handled various large and small incidents.-Implemented and managed Splunk Enterprise Security which is used for ongoing security analysis, investigations and proactive threat mitigation.-Developed operational processes for: incident response, alerting and security escalations.-Responsible for interconnecting various security event sources: server logs, network, various security devices, threat feeds and end point security tools.-Designed and implemented operational aspects for the security infrastructure.-Developed advanced metrics for reporting of risk posture, through scorecards and dashboards.

Austin, Texas, Us

Functioned as the Information Security Officer for multiple financial institutions and health care companies. Managed a team of security engineers & consultants. Performed all of the activities associated with a Security Officer to include GLBA Risk Assessments, security program development, incident response, vendor management, red flags programs, information security awareness training, business continuity planning, audit and exam support, due diligence and security evaluations for new products, and presentations to IT Committee's and boards. -Work with IT and the lines of business and vendors to identify IT and security risks, develop risk reporting and risk remediation plans.-Ensure that all pertinent Information Security regulatory requirements are understood by line of business, IT, and team members.-Partner across the technology and business teams to maximize the quality, integration and effectiveness of the risk management program.-Perform dynamic and static code analysis scans to identify vulnerabilities and poorly written code which could allow for comprise and loss to the company.-Installed and maintain web application firewall environment.-Engage enterprise project managers to establish a process to engage the security team at the appropriate time in the project life cycle.

Specific responsibilities include assuring the protection of mission critical IT assets; assuring compliance with corporate policies and standards; assessing and mitigating threats and vulnerabilities; overseeing awareness, data privacy, and supplier/partner protection strategies; and assuring compliance with regulatory requirements and standards (i.e. Sarbanes-Oxley, HIPAA, and PCI). Conduct security vulnerability and penetration test to determine the risk posture of network connected systems.-Implemented and managed a security incident response process to coordinate activities to mitigate and manage IT security risk to our computing environment.-Lead the implementation of a web application and security vulnerability scanning and penetration program to monthly scan internal and external system to reduce compromise to the corporate network.-Project member for the deployment of manufacturing security process to ensure segmented networks could not be impacted by standard business interruptions. -Conducted security assessments covering several technologies including virtual environments to allow our businesses to enhance their profitability through sales tracking, customer purchase visibility, and real-time analytics. -Lead overhaul of enterprise security reporting to ensure the accuracy and quality of information being reported to executive management. This overhaul allowed the IT security department to gain business trust and credibility. -Lead IT Security Consultant for several successful mergers, acquisitions, and divestitures which were completed on time and within budget. Through these projects the company was able to gain market share and increase net gain. -Implemented a security “dash board” which provided year-to-date status updates of key security metrics and objectives.-Implemented a repeatable process to conduct monthly vulnerability scans for systems and web applications to identify risk and reduce the probability of compromise.

Atlanta, Ga, Us

-Developed and implemented controls and procedures to cost effectively protect information systems assets from intentional or inadvertent modification, disclosure or destruction. -Created policies and procedures to ensure the user community adhered to necessary procedures to maintain network security. -Designed the architecture for a backup environment to meet disaster recovery requirements.-Managed the Anti-Virus domain with a virus outbreak free environment for over two years.

Associate'S Degree, Military Applied Sciences

Associates In Applied Science, Avionics Maintenance Technology/Technician