All things information security & cyber strategy

Product Security; Incident and Vulnerability Management; Bug Bounty Ops

Advisory Board Member - Cybersecurity Degree Program

Advisory Board Member - Cyber Threat Intelligence Summit

Threat and Vulnerability Intelligence, Vulnerability Management, Technical Risk Communications and Threat Modeling.

Responsible for the development of Threat intelligence program, roadmap, processes and procedures.

▶ Created, documented and maintained the CTI threat actor characterization and prioritization process and procedures▶ Partnering with cybersecurity and risk colleagues to better deliver actionable and timely intelligence▶ Collection, analysis, and dissemination of wide range threat information and intelligence▶ Developed priority intelligence requirements and risk rating methodology for categorizing threats to the organization and financial industry

▶ Incident Response: categorizing malicious/non-malicious emails reported by employees; prepared Microsoft Visio Diagrams for IR processes and procedures (phishing, typo squatting, general malware, etc.) ▶ Data Loss Prevention: Remediated Credit Card and Social Security Number related incidents via Symantec DLP; some familiarity with CASB Bitglass solution.▶ Vulnerability Management: Schedule regular scans; participation with Third Party Patching projects, collaborating with vulnerability management team to report vulnerability changes over time. ▶ Application Security: Perform scans utilizing IBM AppScan to identify vulnerabilities within enterprise applications, collaborated with development teams to review and remediate the vulnerabilities, and additionally used Splunk, Qualys and BurpSuite to validate scan results.▶ Identity and Access Management: Provided access and resources to authorized individuals based on company policy and procedures.▶ Threat Intelligence: General research in cyber security current events and threats to the retail, healthcare, finance, and research industry. Also, delivered Threat Actor and Vulnerability assessment reports to Security Operations analysts and leadership. Developed Threat Actor prioritization process for an insurance organization.▶ Information Security Risk: Conducted Third Party Risk assessments for a Healthcare organization; developed process for securing third party applications from the start of the implementation.▶ Training: Participated in various one-on-one trainings with experienced colleagues including Web Application Penetration Testing with BurpSuite, High-level Overview of Penetration testing with Kali Linux and Multi-part series of the Incident Response and Forensic Process.

▶ Manage test case material in relation to requirements and standards.▶ Research, create, and execute test case scenarios.▶ Coordinate with developers, DBAs, and other test groups to compile project information.▶ Involved with various project tasks (e.g. defect coordination, team status reporting).▶ Create, edit and update functional and technical design documents.▶ Lead skills/functional resource training.

▶ Organized help desk tickets▶ Answering multi-line phones▶ Troubleshoot office copiers▶ Assisting technicians with day-to-day duties▶ Monitoring Mail Marshal: Email Filter Software▶ Researched/Drafted procedural documentation

▶ Guided members in achieving their true potential through fitness▶ Built rapport with members and clients to understand their needs▶ Successfully planned individual fitness programs to meet those needs