Seth Edwards Email & Phone Number

Billings, Mt, Us

Burbank, Ca, Us

Manage vulnerability scanning for Disney’s DMED business. Developed an action plan to upgrade scanning architecture to ensure all devices and networks are scanned. Published troubleshooting steps and processes for administrators to run before opening tickets.~ Tested out and applied Role Based Access Control model to ~100 users in 24 hours~ Implemented Scalable AWS Patch Manager solution to patch and report on 90+ instances weeklyTools: Tenable.IO, AWS Patch Manager, Microsoft Office

Us

Developed a plan to patch hosts to current vendor patch baselines, upgrade End of Life operating systems and maintain patching. Wrote procedures to patch multiple Linux distributions and Windows. Performed administrative functions, troubleshooting, and operating system upgrades.~ Manually backed up and patched 50 servers, testing and proving out new procedures~ Evaluated tools for automated patching of 50+ servers with minimal addition to our existing costsTools: Microsoft Office, Linux, Windows Server

Denver, Colorado, Us

Provided Threat, Vulnerability Management and Remediation consulting. Reviewed vulnerabilities and scanning tool configurations to provide best practice recommendations to customers. Assisted customers in establishing and enhancing vulnerability programs.~ Architected a Qualys expansion from 36k to 400k endpoints, taking the tool from an acquired company and turning it into the corporate standardTools: Qualys; Microsoft Office

Everett, Wa, Us

Responsible for establishing a dedicated Security and Privacy organization. Reviewed security posture against NIST controls. Developed recommendations for control gaps. Engaged vendors to evaluate security tools. Participated in RFP reviews.~ Conducted tabletop incident response scenarios with the desktop support and infrastructure teams~ Led evidence gathering and documentation of security effort for cyber insurance renewalTools: Microsoft Office; Black Kite

Burbank, Ca, Us

Established automated enterprise-wide vulnerability rating review, saving 100+ man-hours per month. Worked with data automation and analytics teams to develop in-house data solutions to provide vulnerability data to customers through custom dashboards and reports. Implemented a managed vulnerability scanning service bringing 6 lines of business into alignment with standards. Led a team of contractors responsible for managing and maintaining a vulnerability scanning platform. ~ Led implementation of an enterprise asset correlation tool, identifying discrepancies between configuration management and deployed tools and systems within the first 30 days~ Redesigned 10+ year old vulnerability scanning architecture, improving scanning coverage by 25% and reducing business impacts by 90%.Tools: Qualys; Lumeta Spectre; ServiceNow; Axonius

Bellevue, Wa, Us

Evaluated, recommended and implemented security technologies such as Security Incident Event Manager (SIEM), Data Loss Prevention (DLP), Vulnerability Scanner and Static Code Analyzer. Performed frequent vulnerability and static code scans, worked with developers to remediate. Responsible for training new security engineers and compliance specialists. Engaged with 100+ potential customers regarding security configuration and processes. Authored customer facing security documentation. Responsible for scheduling and coordinating 2 external audits.~ Conducted software testing using static and dynamic analysis tools~ Led coordinated development of vulnerability management processes with operations and IT teamsTools: Veracode; OWASP ZAP; AlienVault; OSSEC; Cygwin; Nessus; Fortify SCA; WebInspect

Washington, Dc, Washington, Dc, Us

Performed software quality assurance, vulnerability, fuzz testing and static code analysis of multiple products, assisting developers to correct findings. Developed scan automation and threat assessments using DoD and OWASP standards. Promoted to Project Lead & Site Manager. Driving force behind recognition from Defense Information Security Agency for being the first team to improve software development security within the Air Force.~ Developed and maintain a manageable software assurance program that meets Air Force standards~ Responsible for on-time delivery of contractual obligations and managing customer expectationsTools: Fortify SCA & SSC; OWASP ZAP; Wireshark; NetWitness; Cygwin; Retina; Nexpose

Conducted system evaluations, analyzed findings, and documented recommendations to Government approving authority. Provided guidance and education on information security practices and risk management. Promoted.~ Developed software certification program for Air Force Academy utilizing Fortify and black box tools~ Identified critical security findings in tools used for recruiting cadet athletes and recommended vendor design changesTools: Wireshark; NetWitness; Cygwin; Retina; Korn Shell; SSH; Tar; LDAP; Fortify SCA; WMIC

Arlington, Va, Us

Spearheaded five DIACAP certification and accreditation projects. Analyzed system capabilities and limitations to prepare and present suggestions to client for advancing system, data, and operational security levels. Developed processes and scripts to audit systems and ensure disaster recovery. Guided engineers and system administrators in design and implementation of Department of Defense (DoD) compliant upgrades/enhancements. Instituted monthly awareness briefings. Trained two alternates. ~ Audited security controls; drafted disaster recovery plans for three systems.~ Rapidly took action to correct security configurations after identifying security issues.

Arlington, Va, Us

Applied in-depth knowledge of Solaris environments and networking, along with comprehensive understanding of RAID implementations to collaborate with team of four to design and built $5MM lab environment. Maintained three separate labs, each with its own unique baseline. Established procedures for scanning media for viruses and monthly defragmentation. Troubleshot and resolved user issues.~ Developed upgraded disk array structure providing hardware redundancy allowing for disk failure with no visible operator impact. Installed remote management and advanced lights out capabilities.~ Formulated disaster recovery, incident response, and continuity plans for training simulator.

Arlington, Va, Us

Team lead of 27 technical specialists in 24/7 maintenance and support for three systems located across two sites, including mission-critical high-availability Solaris network. Monitored system logs. Reviewed, prioritized, scheduled, and assigned jobs to balance workload and ensure coverage of four companies. Advised on troubleshooting and issue resolution. Tracked problems; compiled status reports.~ Completed legacy system transition initiative 30 days early after identifying and correcting single point of failure (SPOF) issue.~ Seamlessly orchestrated six simultaneous remote system migrations over 56k line.

Randolph Afb, Tx, Us

Architected, implemented, and supported the largest deployed NATO network comprised of more than 150 UNIX and Windows machines in a single domain. Introduced and distributed monthly informational bulletin to inform and update local users. Implemented automated management; investigated and briefed leadership on impacts of Federal Information Security Management Act (FISMA). ~ Successfully minimized downtime during migration from Windows NT to Windows 2000.~ Decreased account creation time by 80% through creation of new Solaris scripts and configuration files; cut build time by 50% with updated automated installation scripts for software deployment.

Randolph Afb, Tx, Us

Inspected and assessed 66 mission systems, nine networks and 1,000+ information systems to provide technical and security guidance. Scrutinized emerging technologies and briefed leadership on impact and security risks of new products. Reviewed and aided contractors in rewriting security evaluation procedures. ~ Played integral role in researching and determining vulnerabilities of hand held radios in classified environments prior to purchasing.~ Coordinated and conducted eight classes within ten days to train approximately 150 computer security personnel.~ As Administrator, assisted Defense Information Systems Agency (DISA) in identifying discrepancies.

Master'S Degree, Information Security & Assurance

Bit, Computer Forensics

Education record

Education record