Ryan Vargas Email & Phone Number

Valencia, Ca, Us

• Leads the implementation and ongoing operations of technical cybersecurity controls to continuously improve and expand Logix's protective and defensive security capabilities.• Provide technical leadership for cybersecurity functions including network & endpoint security, IAM, threat & vulnerability management, security monitoring, incident response, etc.• Manage relationships with third party security service providers.• Maintain up-to-date knowledge of industry standards, best practices and the evolving security landscape.• Manages the daily activities of assigned team members to maximize the quality of work and productivity, including cross-functional tasks/projects.• Oversees various cybersecurity engineering activities including penetration tests, vulnerability scans and the vulnerability management program. Creates remediation plans to address relevant security findings.• Monitors advancements in information security technologies and adapts new technology to enhance the company's security posture.• Acts as an integral member of the security incident response team and coordinates the response during security incidents.• Participating in cross-functional projects and initiatives related to information security.• Performs other duties as may be assigned by the Chief Information Security Officer

Valencia, Ca, Us

• Establishes foundational security capabilities as mature service offerings that allow for a seamless user experience. • Establishes and applies risk management principles for consistent tracking and measurement in compliance with industry standards.• Supports governance, risk and compliance programs and leads maturity efforts including external regulator, auditor, and senior leadership information and materials.• Assesses and analyzes employee risk due to accidental, incidental, and awareness security issues. Conducts scheduled penetration testing, simulating attacks on systems to find exploitable weaknesses.• Engineers security solutions efficiently with a minimal technology footprint where possible while ensuring security. Researches, analyzes, and recommends security products, services and tools as needed.• Audits identity and access methods to ensure a zero-trust framework for both production and development business application systems.• Works with IT, business teams and vendors on security program initiatives and resolves security related issues through leadership of projects and technical implementations.• Leads incident response, including steps to minimize impact. Conducts technical and forensic investigations into the source of exploits and the extent of impact.• Performs forensic collection of evidence including retrieval, handling and chain-of-custody, processing and reporting with discretion and integrity.• Performs scripting and customization of required reports and dashboards for technical and executive audiences in both IT and business units. Demonstrates a mastery of system and peripheral logs and packet telemetry.• Provides consistent security guidance that enables new products and solutions to be built securely while validating and or measuring the efficiency of our security posture to include technology reviews, vulnerability assessments, and technical business risk assessments.

Hawthorne, Ca, Us

• Responsible for managing the overall infrastructure and service delivery day-to-day operations• Ensured IT infrastructure system performance and target SLAs are met• Managed infrastructure and service delivery staff, provides direction, organization information and feedback, and performance evaluation• Provided leadership to IT infrastructure projects, including developing project plans, assigning and managing resources, identifying and solving problems, and meeting committed deliverables.• Ensured the Credit Union’s IT infrastructure is compliant with all state and federal regulations pertaining to technology, data security and perform IT infrastructure risk assessments on an annual and ad hoc basis• Responsible for IT infrastructure and security monitoring and manages incident response• Ensured infrastructure and service delivery team is mitigating, monitoring, and managing infrastructure-related risks• Ensured full lifecycle value is achieved on all IT infrastructure product and service providers• Participated in IT strategy planning activities

Us

Promotion to the Sr Director role allowed me to do more in my position:• Implemented the following additional policies following the NIST Cybersecurity Framework as the guideline: - Computer and System Logging Policy - Physical Security Policy - Vulnerability Management Policy - Endpoint and Server Hardening Guidelines and Policy - Security Mitigation and Patch Management Policy - Configuration Management and Baselining Policy - Improved Password Policy by following the NIST SP 800-63 digital identity guidelines.• Using the Qualys VMDR, lead the verification and remediation efforts resulting from vulnerability management program.• Managed third party vendors in performing the annual penetration testing and lead the required remediation efforts resulting from the pen testing work. • Lead the efforts to conduct the Annual Employee Cybersecurity Training with a 100% pass and participation.• Integral to ensuring that the firm complied with the SWIFT CSP by completing the Annual Security Attestation.• Responsible for the identification of security issues and risks associated with security events and manage the incident response process.• Lead the team to perform network and system forensics in response to security incidents.• Managed the team to conduct risk assessments, penetration tests, and diagnose internet/extranet security, intrusion attempts, and cyber-crime response.• Lead project tasks on select security projects including development of requirements, evaluation of competing products, selection and implementation of products.• Created the responses to internal & external audits, pen tests and vulnerability assessments.• Recommend and coordinate the application of fixes and patches in response to security assessments.• Responsible for all VMware and Citrix environments, including Microsoft Windows Servers, Active Directory, Azure, Microsoft 365, and Rackspace IaaS.

Us

As Associate Director of IT Infrastructure, and a hand-on Senior Systems Engineer, I created and led migration and decommissioning roadmaps and designed and built a hyperconverged infrastructure at two collocated data centers, including 500+ Windows and Linux virtual machines and 44 ESXi hosts on Cisco UCS clusters. I performed risk assessments, remediated vulnerabilities, and ensured compliance with organizational, regulatory, and industry security requirements. I oversaw physical and virtual server patching, antivirus protection, group policies, and a hybrid cloud VoIP system.Highlights of the benefits I provided First Quadrant in this role included:• Constructed Nexus and Catalyst switching platforms.• Deployed Cisco ASA Firewalls, Citrix NetScaler Gateway, and Barracuda Anti-spam Firewall• Reviewed and tested disaster recovery (DR) and business continuity (BC) plans.• Turned around 97-98% failure/downtime rate to 99.999% uptime by building a highly virtualized and collocated data center.• Moved production, development, and testing to CenturyLink (Cyxtera) collocated data centers; built private cloud running VMware virtual machines in a clustered NetApp OnTap scalable environment.• Improved email redundancy and availability by utilizing database availability groups and BCP/DR communication and delivery strategy.• Migrated almost 200 users, shared mailboxes, 120GB of public folders, and 100 distribution groups from Exchange 2010 to Exchange 2016 with zero service disruption.• Setup public cloud on Rackspace IAAS to run public web servers and customer access portal.

As CTO at DeWitt Stern, I oversaw infrastructure and operations for a national insurance brokerage and risk advisory firm with offices in New York, Chicago, Nashville, and Southern California. I reported to the COO and collaborated with C-level leaders and branch directors to gather requirements, provided the technology vision, and created strategic plans focused on business continuity and operational efficiency. I mentored system engineers nationwide and personally provided engineering support for two Southern California branch offices.Some examples of the benefits I contributed included:• Designed and deployed disaster recovery plan from scratch utilizing data replication solution at collocated TelePacific data center, achieving 98% testing success rate with gaps identified and resolved within testing year.• Centralized Active Directory and Exchange environments.• Consolidated software and hardware sourcing and procurement to leverage cost reduction potential.

As Assistant VP at DeWitt Stern, I analyzed current state infrastructure and using existing assets, directed three System Engineers to build a more robust and centralized infrastructure and management solution scaled to support growth. I provided help desk support and end-user training to over 200 employees in Southern California branch offices.Examples of the value I contributed while in this position included:• Cut IT expenses through technology consolidation and contract negotiations while improving network performance, resiliency, efficiency, and productivity.• Re-engineered Active Directory environment.• Built resilient clustered storage.• Created and implemented a redundant server infrastructure and BC/DR strategy.• Transitioned decentralized to unified, centralized infrastructure that streamlined IT administration and drove cost efficiencies and better collaboration.• Configured site and endpoint security.• Setup Cisco routers and VPN devices for remote connectivity.

Valhalla, Ny, Us

Bachelors Of Science In Business Administration, Management Information Systems

Associate Of Science, Computer Science