Timothy Rogers Email & Phone Number

Hartford, Ct, Us

Arlington, Va, Us

Responsible for conducting both offensive (Red Team) and defensive (Blue Team) assessments using “real-world attacks” of enterprise networks, systems and applications to identify and validate risks to the company

Originally recruited by the UTC Chief Information Security Officer to come in and create an internal forensic investigative service. Following the successful creation of a self-sustain, cost recouping organization; challenged to create similar e-Discovery, Vulnerability Management, Incident Response, Security Architecture and Insider Threat teams. Responsibilities included managing UTC employees, contractors and finances for the Corporate IT Security budget.- Plan, organize and present semi-annual Security briefings to the CEO and their direct staff.- Provided monthly key Security metrics to Senior Executive team.- Given full responsibility to budget, manage and track the security budget including capital and expense forecasts predicting yearly growth.- Participated within a core team to reshape and revitalize corporate wide policies, enforcing new regulatory and compliance laws.- Managed the integration of industry best practices (NIST, ISO, SANS, COBIT, CERT) into UTC IT policies, procedures, standards and guidelines.- Managed high-level forensic investigations ensuring standardized processing, confidentiality and upmost discretion. - Built a strong incident response organization from bare bones taking the lead role in key penetration incidents.- Manage yearly external vulnerability assessment including request for information (RFI), request for proposal (RFP), negotiate fees and services, point of contact for response, reported threats to UTC - Managed internal “Red Team” providing ethical hacking services testing internal controls and exposing internal weaknesses. Detailed reports providing threat scenarios and cost-effective solutions- Emphasized a well-trained workforce, setting training criteria for expertise in all supporting applications and Core Impact certification, SANS Incident Handling Certification (GCIH) and Certified Ethical Hacker (CEH) requirements

East Hartford, Ct, Us

Organically grew into management role, building an IT Security organization during a post outsourcing environment bringing back in scope the IT Security organization while managing certain outsourced security components. - Grew post outsourcing staff from 1 to 10 employees in 2 years showing return of the investment verses cost avoidance such as in an insurance policy.- Baseline Pratt & Whitney security practice against ISO and Cobit frameworks to find the gaps needing immediate need, then measured progress yearly with repeat evaluations.- Worked with the lines of business building secure architectures enabling business growth.

East Hartford, Ct, Us

Post outsourcing to CSC, remained a Pratt & Whitney employee to manage the security relationship, performed forensic investigation and established security standards- Performed vulnerability assessments, reporting risks and concerns to senior management.- Performed internal investigations and digital forensics, reporting results to Legal and Human Resource executive team.- Research and establish security standards, test then implement into production system

Ms, Information Assurance

Masters Of Science, Computer Science

Bachelor Of Science, Computer Science

Education record