Scott Shackleton Email & Phone Number

Denver, Colorado, Us

Advising C-Suite and security leaders in maturing their security programs throughout plan, build, and run phases.● Security Program Strategy● Risk Mitigation Strategy● Zero Trust Strategy● Assist in the identification, procurement, and project management of security tools and services

San Francisco, Ca, Us

Led Unison's Information Security Program from inception to implementation; focused upon risk identification and mitigation.• Built and led the Security Leadership Team to coordinate cross-functional security projects and promote awareness throughout the organization• Member of the enterprise Change Advisory Board (CAB); reviewed and approved changes from the security team perspective• Developed and gained executive approval of a written information security program (WISP) within three months of joining the company• Vetted, recommended, implemented, and managed the operations for identity and access management (IAM), endpoint detection and response (EDR), managed detection and response (MDR), unified endpoint management (UEM/MDM), Cisco Umbrella, vulnerability management, Splunk, AWS security tools, security awareness training, and a bug bounty program• Created and maintained a risk register to prioritize security projects across the enterprise• Launched software assurance maturity program based upon the OWASP Software Assurance Maturity Model (SAMM)• Launched security incident management team and security incident management program

Designed, implemented, optimized, managed, and documented a secure computer network architecture to mitigate risk through security controls and by hiring highly competent people to implement Vidder’s Information Security Programo Developed and maintained the Security Program at Vidder having determined control measurements and charted critical controls to technologies and processeso Researched and planned internal security controls based upon the SANS Institute's 20 Critical Security Controls (now CIS Controls)o Planned and executed phased risk assessments, gap analyses, and corrective project plans over a multi-year period and incorporated Vidder's own Software Defined Perimeter (SDP) technology for application access control and attack mitigationo Designed the network environment and implemented Microsoft Active Directory, federated Office 365 using Okta (SAML 2.0), and evaluated, implemented, configured, and optimized various security technologies (specific products confidential)o Based upon my recommendations, Vidder constantly evolved its Information Security controls and processes to ensure maximum threat mitigation, control of our data, and visibility into network traffic and potential risksPKI Operations Lead at Vidder and Vidder’s customerso Multi-year project team member implementing a ground up two-tier PKI project at a Fortune 100 company including HSM key management integration and high availabilityo During this project and following its completion, led a team of the customer’s employees and contractors in its world-wide PKI operations, including strict change control management using the customer’s ServiceNow management platform and managing certificates using Venafi Encryption Director

Chatham, Massachusetts, Us

Designed and optimized Microsoft Active Directory and Exchange Server solutions for Compu-Call’s clients through VM creation (VMware), Group Policy configuration, VLAN creation, disaster recovery planning, and documentationDaily exposure to WatchGuard System Manager configuring and troubleshooting firewall policies, proxy action definitions, Intrusion Prevention, VPN creation, reporting, and log analysisFocused upon IBM equipment for server, midrange, and storage solutions including Blade Center and SAN configurationPartial role as a sales engineer: identified client pain points, recommended hardware / software, and drafted project plansSome of the projects for which I had been a key player include:1. Staging a disaster recovery center relocating servers, restoring lost data, and keeping client employees connected (email, network storage, and VPN access).2. Evaluating obsolete or aging networks (Windows NT and Windows 2000) and migrating them to more current technologies including Windows 2008 64bit Domain Controllers and Exchange 2007 servers with managed switches (Cisco 2960G and various stacked HP switches). I've been looking into Exchange 2010 but haven't yet had an opportunity to implement an upgrade.3. Migrating email to cloud-based Microsoft Exchange for smaller companies. I've trained end-users on the benefits of Exchange, especially shared calendars, email distribution groups (ask me why it's often better to use a distribution group instead of a generic mailbox such as info@domain.com), and ActiveSync.

Bachelor Of Arts - Ba, Political Science And Government

Education record