Peter Sampson Email & Phone Number

Warren, New Jersey, Us

New York, Ny, Us

Micro-Segmentation - Successfully implemented a global micro-segmentation solution for a client base of 12,000 users, encompassing desktops, video, and room management. Leveraged CISCO ISE and Symantec Endpoint Protection to establish robust security policies and evaluate their effectiveness.Architecture Review Board - Served as the primary security contact for the architectural review board, conducting thorough assessments of new and existing technologies. Advised application owners on shift-left techniques and best practices to proactively address security concerns.Configuration Management - Led the configuration management efforts by collaborating with engineering teams to create baselines aligned with SOC2 certification requirements. Implemented Tripwire and Qualys Policy Compliance to ensure compliance for 1,000 Windows/RHEL servers. Consulted with operations teams to remediate any identified vulnerabilities. Additionally, utilized Oracle Enterprise Management tool for securing Oracle databases and Microsoft-provided PowerShell scripts for MSSQL.Cloud Migration - Provided expert security guidance and conducted rigorous review processes to facilitate the secure offboarding of https://www.bbh.com to Amazon Web Services. Contributed to the Cloud Committee, actively vetting and evaluating the security capabilities of three major cloud providers to ensure optimal cloud security for the organization.Successfully managed special projects, including spearheading the security response to the Iran incident and leading the COVID-19 business continuity planning (BCP) response.

Paris, Fr

Standards - Collaborated with Paris head office and application support groups to align standards, frameworks, and security measures with the overall business and technology strategy. Engaged in effective liaison and negotiation processes to ensure compliance and security objectives were met.Cloud - Played a key role in contributing requirements and updates to global cloud standards, with a specific focus on architecting security for the migration of two on-premises applications to the AWS Cloud (EFS and Dash). Led architectural review sessions to address critical aspects including virtual private clouds, security groups, network access control lists, IAM reconciliations, and data protection across global boundaries.Baselines - Authored, suggested, and liaised for the development of security baselines for applications, ensuring comprehensive security measures were implemented and adhered to.Database - Led the database encryption-in-transit project, providing expertise in upgrading Oracle, MSSQL, and Sybase databases to enable encryption in motion. Successfully implemented encryption measures across a total of 112 databases, while ensuring proper documentation, tracking, and advisory support.Application Design - Identified security design gaps in existing and proposed architectures, delivering actionable recommendations for changes or enhancements. Actively participated in designing and managing IT security, with a primary focus on infrastructure

New York, Ny, Us

Senior Cyber Security Architect for JPMorgan Chase supporting the Asset Management line of business. Lead team of five.• Security Assurance Program – Adopted and developed as part of the SDLC process the means to assess applications and report accordingly. Also liaised with Risk groups to remediate gaps and reduce risk acceptances.• Data Classification – Lead and managed a major project piloting automated unstructured data classification software (Titus) to meet legal and compliance regulations (GDPR) for multiple jurisdictions.• Threat Modelling using first principles or SD Elements – Threat modelling is a process that enables developers to analyse applications by de-constructing them into individual parts and considering the applicable threats. • Product owner for SD Elements (TM tool). Appropriate and agree roadmaps and strategic direction.• Security Checklists NIST-800 controls – Created an Asset management security tool for a thorough, consistent and measureable process for assessing the security of different applications. Extracted the application security controls from NIST-800. Created a security go-to checklist for developers, providing reporting to all levels of management.• CI/CD - Provided security advice for CI/CD applications moving to private cloud• Performed high level security assessments of Cloudera Hadoop, Salesforce, Delphix, Addepar and Quovo.• Cloud - Collaborated on creating the first terms and requirements of cloud adoption/migration. o Contributed to the creation of the JPMC Public Cloud policy controls.o Created cloud engagement model o Assessed and advised application architects on migrating apps to AWS.o Leveraged CASB SkyHigh to perform assessments of several SaaS offerings.• HOW-To’s – to design patterns for cross site scripting, SQL, injection and PATH manipulation vulnerabilities.• Hosted ASC Forum for application security champions – An internal designation promoting security excellence.

New York, Ny, Us

Assigned to the Chief information Security Officer. • Data Center Move: •Moving from single data center to two purpose built environments.•90% virtual environment using vBlock, VMware VCAC, NSX, ESX 5.5.Introducing Micro-segmentation.•Provided requirements for the use of orchestration tools such as Puppet.•Created security requirements and liaised with networks and lines of business to create an extensible, logical and physical design.•Conducted research and analysis concerning which new generation firewall to purchase (Checkpoint or Palo Alto Networks).•Working with application owners to classify data and protect accordingly.•Coordinate the security-related strategic and visionary goals of the business. (e.g. Cloud, Single sign on, SDLC). •Provided requirements and guidance specifically for Amazon AWS, Microsoft Project Online and Office 365.•Works with technical management to specify cost-effective security controls and convey security control requirements to users and custodians. Created a wiki site to facilitate this.•Create BYOD mobile policy and reviewed Mobile Iron MDM solution. Provided requirements for mobile applications and policy and best practices going forward.•Provide an assurance program for new and existing products and services providing security advice and guidance ensuring security controls meet with policy guidelines. Advising on remediable items and leading the client through the Risk procedure.•Provided security baselines for IE11, RHEL6, Windows 2012 and Oracle 12c.•Partner with engineers in IT Security and peer Enterprise infrastructure to understand strategy and underlying business drivers to develop product offerings, roadmaps and plans.•Manage communications and management with peers.•Compile, report and interpret information security metrics to senior management.

New York, Ny, Us

Assigned to an advising organization overseeing all business lines, representing and explaining security posture. • Head security lead for: • Low latency, high volume trading platform (Velocity). • $15M hosting agreement for a divested subsidiary. • Major Global capital markets book building application. • Global employee and guest wifi deployment.• The remediation of web security issues for organization’s core applications during a data center migration.• Perform reviews of new and existing products providing security advice and guidance ensuring security controls meet with policy guidelines. Advising on remediable items and leading the client through the Risk acceptance procedure.• Regular presenter for the Americas, providing knowledge transfers to varied audiences.• Provide consulting services to business lines in the design, architecture and deployment of in house and third party applications.• Partner with engineers in IT Security and peer Enterprise infrastructure to understand strategy and underlying business drivers to develop product offerings, roadmaps and plans.• Manage communications and management with peers.• Project managed, supervise, plan and co-ordinate new deployments and infrastructure upgrades.• Provide recommendations for new policies, best practices, procedures and modifications in line with business objectives.• Manage and provide oversight, guidance and mentorship to 10 managed service consultants as a team lead. Collaborate with business management teams to develop financial models on cost to deliver IT security products and services• Authored security policy for 3rd party hosting arrangements and virtual data rooms. Collaborating with level 1 vendor to create a managed service agreement.

New York, Ny, Us

Assigned to a support organization overseeing multiple business lines (Banking, Equity Research, FID). •Planned, organized, coordinated and executed major server refresh moving 650 development servers to virtual machines.•Project managed Supervise, plan and co-ordinate new deployments and infrastructure upgrades.•Provide recommendations for new policies, best practices, procedures and modifications in order to facilitate objectives.•Liaising with technology silo’s for service to developers. •Determine the resources required to complete a project.•Trouble-shooting software and application errors.•Prepare and report status to management.•Engineered and implemented application for Trading group (MarketQA).•Engineered and supported SAS product for Trading Channel.

Nashville, Tn, Us

Member of team of five responsible for creating global solutions and baseline policy making.•Head technical lead and project manager for nine month pilot of identity management software (BMC Control-SA and Sun Micro’s Waveset).•IT risk management and remediation in line with Sarbanes Oxley guidelines.•CIRT team member.•Head Engineer for the RSA SecureID product.•Hardening of Linux server build at creation and with follow up compliance scripts.•Primary engineer for the use of penetration and vulnerability tools. ISS system and Database scanner.•DNS Administrator (Lucent QIP).•Designed, created and implemented, new FTP server infrastructure using FTP proxies and GPG keys.•Created new disaster recovery/Business continuity plan.•Checkpoint NG firewall changes.

New York, Ny, Us

In a group of five. Unix security engineering team specializing in securing, creating global solutions. Gave a presentation to the RSA Users group.•Part of team that engineered single sign on biometric solution using ActivCard Software.•Created an add-on module to Keon to check the integrity of server builds. Created dollar savings.•Vulnerability Software – ISS (System and Database Scanner), Nessus and IBM NSA.•Responsibility for the disaster recovery plan. Main support engineer during annual full interruption test.•Experience of virus signature acquisition, testing and distribution.Engineering and third level support of TFS Unix Control (RSA Keon) software for Solaris, Linux and AIX.•Creating, Testing and Certification, providing full documentation, for all new security software (e.g. SSH).•Authored Security baselines for Solaris, Linux, AIX and HP-UX Engineering server builds.•Creation of suite of scripts that test and correct the baseline settings for the bank’s servers.

New York, Ny, Us

Systems Administrator in group of 8. Gold Service Star winner for outstanding performance.•NIS+, NFS, LDAP, DNS, Veritas Volume manager. Server install of new servers.•Support for Sybase and Oracle DBA's. Ksh, Csh and Perl shell scripting.••Third Level Support 300 Solaris clients and 450 Servers.

Bs, Computer Studies

Bsc, Information Security

Computer Science