Scott Stewart Email & Phone Number

Seattle, Wa, Us

Seattle, Wa, Us

Seattle, Wa, Us

Plano, Tx, Us

- Managed wide variety of security and business services, including project delivery, pre-sales, web application testing, penetration testing (wired/wireless), and social engineering (phishing and physical security).- Conducted scans of enterprise environments (internally and externally) to identify vulnerabilities.- Prioritize risk and remediation effort of discovered issues to maximize effectiveness of issue resolutions.- Collaborate with client teams as a business partner to increase effectiveness of SIEM, DLP, and IDS/IPS technologies.- Communicate with non-technical audiences to ensure understanding of issues, risks, and remediation of assessment findings. Framed deliverables with reference to compliance and governance requirements: PCI-DSS, HIPAA, ISO 27000.- Drove revisit sales process for additional expanded engagements by clients based on quality of deliverables and “trusted advisor” status. Follow-on project revenue averages 85% higher than initial engagement.- Test IT infrastructure to ensure maximum confidentiality, integrity, and availability of assets and data.- Document data stores, sensitivity, and flows to guard against unauthorized modification or loss.- Create and launch incident response programs, including full mock events (red/blue/purple team) escalating from small team up to department-wide simulations. Develop and document evidence handling and escalation path procedures.

Dallas, Texas, Us

- Team lead for NIRT (National Incident Response Team) testing team of 3-5 testers to conduct vulnerability assessment and penetration testing. Reduce or eliminate risks to organization reputation, systems, and data.- Incorporated business leaders and decision makers into the evaluation and remediation process ensuring engagement at the appropriate level for recommendations to be implemented. Delivered and explained assessment results.- Directed resolution of complex security issues bridging diverse departments, systems, and data custodians.- Evaluated systems and interfaces for risk and compliance with established security policies.- Managed 2 testers to establish test responsibilities, review deliverables, suggest grammatical or descriptive improvements within deliverables. Established skill building and career development targets.

Arlington, Virginia, Us

- Managed security program, including vulnerability assessment, penetration testing, physical security evaluation, personnel training, and access control. Captured and analyzed network traffic.- Managed four-person incident response and audit team through security sweeps, including mapping, log analysis, documentation, and scanning. - Supervised IAM for organizational unit (approx. 500 soldiers). Scheduled laptop re-imaging sessions following troop deployments. Coordinated RMAs and upgrades to hardware.- Oversaw vendor relationships and SLAs. Resolved issues with hardware, software, and personnel access. Tracked vendor milestones, delivery, implementation, and budgeting. - Maintained equipment, policies, and operations to guard against breaches and failures. - Developed threat analysis reports and training to educate stakeholders of present and rising risks related to systems and personally identifiable information (PII). - Controlled secure document store and chain of custody for COMSEC keys.- Created and enforced situation response plans.- Designed and implemented access control policies.

- Evaluated and secured clients’ infrastructure through penetration testing. Increased web application security and eliminated discovered vulnerabilities. Assessed and improved physical access standards.- Designed and secured network infrastructure, including redundant data with failover.- Applied OWASP standards to client projects, particularly session management and input validation.- Guided enterprises through strategic planning, implementation, and administration of enhanced processes and information security.

Online trading subsidiary of Rushmore Financial Group developing stock-trading application and decision tools.- Provided guidance and direction to senior leadership in consulting, planning, and marketing of multiple complex automated systems.- Developed high-level solution design for trading network.- Developed and documented technical design of server network providing operational and network redundancy.- Successfully managed application-development project from inception through rollout to clientele.- Subject matter expert across departments.- Provided primary support and guidance to internal teams.

Day-trading operation pioneering remote trading and intranet-based reporting. Primary test site for the CyberTrader platform over a 2-year period prior to its purchase by Charles Schwab for $488 million.- Maintained trading network for rapidly growing day-trading firm.- Established direct connection to NYSE and NASDAQ to ensure fastest possible executions for clientele.- Established and maintained direct connection to offices in Chicago and Houston for redundancy and data exchange.- Selected and customized cost-effective solutions to achieve functional requirements.- Trained office staff in use of software, end-of-day settlement procedures, and reporting.- Designed remote-trading strategy (before online trading existed). Established ISDN server to allow clients to trade remotely, eventually transitioning to access using DSL.

Columbia, Maryland, Us

Implementation Specialist for industry-leading point of sale provider for the hospitality industry. Dealt exclusively with Major Account clients: casinos, hotels, etc.- Managed implementation of POS systems in hospitality environments, primarily casinos and hotels.- Analysis of current business processes and functional requirements to design and implement new systems with lowest possible learning curve for users.- Identified necessary changes to current processes to improve efficiency or utilize features in new system. Reengineered ineffective processes. Transitioned key processes to new system.- Developed training curriculum and schedule for client employees. Managed training sessions and mentored trainers working on team.- Verified and reported system issues to development staff. Tested and installed patches when they became available.