Chris Romeo Email & Phone Number

Fuquay Varina, Nc, Us

Fuquay-Varina, North Carolina, Us

At Devici, we're not just a threat modeling tool but a movement that embraces the craftsmanship required for secure software development. Our name draws inspiration from the genius of Leonardo Da Vinci, who saw the intricate connections between art and science, much like our approach to crafting secure and private software. Just as Da Vinci meticulously studied anatomy, engineering, and more to improve his art, we empower developers and engineers to delve deep into the design of their software, uncovering potential security and privacy threats. We help implement secure by design foundations.Like Da Vinci's belief in sight as the ultimate sense, developers see beyond the surface, viewing every design decision as an opportunity for security. We share Da Vinci's ethos of "knowing how to see" and apply it to threat modeling – anticipating and mitigating vulnerabilities before they surface. It's the embodiment of Secure by Design. Our mission is to guide and inspire development teams, arming them with the insights and tools to craft software that stands firm against threats. This is more than just code; it's artistry in security. This is Devici.

We provide experienced application security guidance and invest in game-changing cybersecurity startups. Kerr Ventures is based on the wisdom, knowledge, and experience Chris and Deb Romeo gained, starting Security Journey in 2016 and leading the company to a successful exit in 2022. Chris and Deb are passionate about growing entrepreneurs and companies by offering advice and investing in new ideas.Kerr Ventures exists for four primary reasons. First, education. We provide free resources via podcasts, webinars, and newsletters. Second, investment. We provide money, expertise, and advice at every step of the founder's journey. Third, incubation. We bring our wisdom and experience to every company we work with. Fourth, consulting. We can help your company improve your application security — at any scale.

Pittsburgh, Pennsylvania, Us

Pittsburgh, Pennsylvania, Us

Security Journey is a security education startup building sustainable security culture for our clients. We guide our clients – many in tech, healthcare, and finance – to squashing vulnerabilities before they impact customers. We promote security awareness organization-wide with learning that is engaging, motivating, hands-on, and fun. In short, we provide security training developers, testers, and managers want to consume.Our cloud-based platform instructs in the lessons of application and product security, provides immersive, hands-on activities, measures the growth of each student and the entire organization, rewards student achievements, and transforms an organization's security culture.

Durham, Nc, Us

London, England, Gb

San Jose, Ca, Us

As the Chief Security Advocate & Ninja for the Cisco Secure Development Lifecycle, Chris was the creator of the Cisco Security Ninja program, an internal product security awareness and training program. The program teaches the disciplines of secure product development for all levels of the organization.* Cisco Security Ninja program -- over thirty thousand Cisco employees and contractors trained since December 2012; Oversees the creation of module content (100 modules to date); Host / star / and produce one hundred hours of secure product development content, including security metaphors (creative and fun spoofs and jokes that capture the attention of the participants and keep them engaged)* Executive responsible for the Security Advocate program; a virtual, cross-functional team of security enthusiasts from across the engineering organization at Cisco* Deploy and execute internal security conferences for Cisco sites around the globe: Bangalore, Shanghai, London; and across the United States: San Jose, Austin, Boston, Atlanta, and Raleigh* Speaker at internal and external conferences and also contributor to Cisco Security external blog* Liaison to San Jose State University in the creation of a Cyber Security Masters Degree program tailored for Cisco* Was lead for Threat Modeling SDL element and acted as the primary interface across the engineering organization at Cisco to evangelize the adoption of threat modeling

San Jose, Ca, Us

Customer advocate for Common Criteria & FIPS 140 concerns or problems, collaboration with the global sales force to advise on the status of certification programs and strategize new programs. Established relationships with product managers / engineering teams / BUs and helped them understand certification process and requirements. Managed vendor relationships with certification test labs, including adherence to program schedule and financial management of budget / statements of work on a per program basis* Public face of certifications at Cisco, participated in the Common Criteria Users Forum and the ICSA certification vendor consortiums* Design, setup, and administer security certification pre-testing lab* Presented certification status and challenges to executives* Analyzed and created metrics for US Federal Sales certified revenue, maintaining a 75% or higher result each fiscal quarter* Created the Cisco Policy on Source Code Review for Global Governments

Bethesda, Md, Us

Performed qualitative risk assessments of outsourced and new systems. Acted as a security evangelist, ensuring that security was given the proper focus on projects. Coordinated vulnerability scan and penetration test efforts for programs. Coordinated with the Information Security governance organization concerning acceptable solutions that meet corporate defined information protection standards. Focused on issues related to software security and assurance.

London, England, Gb

Managed the day-to-day operations of 30 information security professionals who administer and monitor over 1,000 firewalls and Intrusion Detection Systems, many for Fortune 100 customers. Proactively developed technological solutions to improve managed security services delivered to customers. Maintained and created operational policies and procedures* Created the plan and concept of operations (CONOPS) for the Global Managed Security Operations Center (SOC). The CONOPS paved the way for the integration between two disparate groups (Firewall Administrators and Intrusion Analysts)* Provided expertise as Subject Matter Expert (SME) advisor to a product development team on technical issues concerning security Event Correlation* Contributing architect in the creation of a solution for the Managed Security Services business, including the development of a new customer-facing cyber threat reporting system which includes a new enterprise database schema

Us

Supervised a global team of 12 security engineers on three continents. Conducted business development and sales engineering support with account executives and customers to demonstrate the capabilities and knowledge of the Incident Response Team. Acted as a Primary Investigator of major cybercrime cases with overall responsibility for case/consulting engagement to customers. * Served as system architect and lead developer for an event correlation system receiving data from firewalls, network- and host-based intrusion detection devices and other mission-critical servers* Designed and led the implementation of a new business process that boosted customer satisfaction and retained customers during difficult economic times by providing reports that summarized a customer’s monthly security events and provided charts and graphs for Executive Management review, demonstrating the value of Managed Security Services* Led the largest cybercrime investigation handled by the company that spanned over 100 separate compromised computers used by multiple hacker groups. This investigation required detailed forensic analysis and a record of hundreds of separate events that all tied together concerning the compromise of one customer.* Directed efforts and investigated a DNS based Distributed Denial of Service (DDoS) attack against a major ISP’s DNS infrastructure.* Interviewed numerous times for preeminent industry publications, including Network World, e- Week and ComputerWorld.* Investigated numerous web site defacements, DDoS attacks, and hacker intrusions. Provided response and consulting on the Code Red, Nimda and SQL Slammer worms.

Us

Led and contributed to the successful completion of various tasks as an Information Security consultant to clients in the financial, health and retail sectors. Performed penetration testing, vulnerability scanning, security architecture reviews and security policy development for customers.* Discovered a major flaw in a customer’s online stock trading application that allowed an attacker to take over the session of a legitimate user and act as that user. This finding saved the customer the embarrassment of a security incident during their initial deployment.* Performed multiple reviews of an online benefits application for a billion dollar healthcare company.*Analyzed the security architecture and made recommendations, performed external and internal vulnerability scans and performed penetration testing of both the host/network and the application. * Designed a secure, high performance network for a premier travel and rental services firm, utilizing load-balanced firewall configurations. The design resulted in the customer having a superior architecture that provided them additional growth while focusing on security.* Star Award recipient in 2000, for contributions made above and beyond the call of duty

Provided system administration services, designed and oversaw the Virtual Private Network (VPN).* President Award, for outstanding achievement and work ethic, 1998.* Contributed to the successful trusted product evaluation of the IBM RS/6000 Distributed System at security level C2. Focused on memory management, hardware and product testing. Defended security analysis before an NSA Technical Review Board.

Bachelors, Computer Information Systems

Master'S Degree, Christian Ministry