Built a security engineering team focused on detection and response, cloud security, product security, and vulnerability managementPartnered with engineering infrastructure teams to design and implement new product security featuresDesigned and executed a lightweight risk assessment program to prioritize work for the entire securitydepartmentCreated and socialized product security KPIs, which the engineering organization carried and used toprioritize security improvementsPlanned, recorded, and delivered annual company-wide security awareness training, which recipientsfound effective and enjoyableDesigned and implemented multiple controls to meet SOC 2 Type II requirementsBuilt out an effective on-call rotation to provide security incident response coverage before securityoperations analysts could be hired

Led multiple teams focused on ensuring the security of all of the cloud offers within Cisco’s $3 billion security portfolioDeveloped engineering strategic roadmaps for internal security products designed to automate critical processes, and secure multi-cloud offersOversaw numerous operational security functions, including incident response, vulnerability management, and identity and access controlDrove customer service focus for interacting with our internal customersPartnered with Cisco’s M&A team to plan and execute security and IT integration before, during, andafter Duo’s acquisitionSupported product and design teams with feedback, brainstorming, and ideation to shape the directionof the roadmap of productsBuilt a remote work culture for a team of 18 that supported each individual’s needs throughout thepandemic, with a focus on building connectedness and avoiding burnout while maintaining productivity

Built many of Duo’s security functions from scratch, including incident response, vulnerability management, vendor management, security education, security incident and event management (SIEM), risk management, and identity and access controlLed engineering teams that built internal security products focused on incident detection, identity and access management, and response and securing endpoints and cloud servicesWorked directly with customers to support sales deals as a practitionerAnalyzed and negotiated contract terms requested by customersManaged the end-to-end process of Duo’s first SOC 2 assessmentLed the build-out of all of the security controls for Duo’s FedRAMP offerSpoke on behalf of Duo through various conferences, panels, and webinars

Developed and delivered curriculum for several undergraduate-level coursesLectured and worked one-on-one with students at all levels of experience on topics including Linuxmanagement, web application security, and malware analysis

Developed and implemented an incident detection and response programServed as chair of the IT Policy CommitteeDesigned a multifaceted security education program for faculty, staff, and studentsSupported law enforcement and HR by providing forensic investigationsImplemented a vulnerability management program focused on enabling system owners to understandand remediate findings easily

Managed all aspects of the 60,000+ mailbox messaging and collaboration systemsPlanned and executed a migration from a hosted Zimbra mail server to Google WorkspaceDeveloped scripts and web applications to automate complicated proceduresImplemented an outage monitoring system to reduce the time to resolve availability issues

Supported students, staff, and faculty with various software, network, and hardware issues and service requests over the phone, via email, and on site. Trained new employees on EMU policies, procedures, and information about EMU’s IT systems. Supervised night shifts as necessary.