Key Service Offerings: Assurance that networks meet PCI-DSS, HIPAA and SOX compliance requirements. Create, update and validate security policies, DR/COB and incident response plans. Design, implement and maintain File and System Integrity Monitoring and Log consolidation using Symantec SSIM, Tripwire Log Center and Tripwire Enterprise and other solutions sets. Design, configure and maintain Argent Guardian network monitoring solutions using an array of tool sets. Implement and maintain vulnerability management and penetration testing solutions with multiple Gartner Magic Quadrant products including Nexpose, Nessus, and Metasploit. Deploy and maintain enterprise network solutions including VPN driven connectivity and firewalls Design, implement and documentation of PCI-DSS 3.0/1 compliant network infrastructures including firewall segmentation, tokenization or other hardening measures. Design and implement segregation of corporate infrastructures from CDE (card holder data environment) utilizing CISCO, SonicWall, Juniper and other security appliances, Implementation and maintenance of Exchange 2003 and 2010 server environment. Multiple sites and servers with both mailbox and routing servers, ActiveSync, Outlook Web Access over SSL/TLS. Secure Exchange E-mail Migrations to and from cloud and internal solutions. Design and implement corporate web and email filtering solutions with variety of products including Trustwave WFR and ModusGate.

Contract to assist client in building and refining enterprise-wide information-security program. Assist with companywide efforts to identify and evaluate all critical systems. Design and implement security processes and procedures and provide strategic recommendations for network security. Collaborate with internal Risk and Compliance teams to assist with in-depth compliance audits and penetration test remediation, presenting results to senior management. Document Information Security processes including sensitive data handling procedures, FirePower IPS sensors and FireSight system maintenance and management. Create procedures and project plans for remote site network segmentation project in support of PCI compliance efforts. Manage and document sensitive data management application and handling processes by utilizing Varonis DatAdvantage to analyze shared data locations and create alerting functionality with Varonis DatAlert. Communicate sensitive data remediation procedures to data owners and monitor progress of effort. Create technical risk assessment documentation for unstructured data. Primary Information Security engineering resource for network segmentation initiative including creating project plans and functioning as liaison to Network Infrastructure team. Plan and implement proof of concept implementations for Varonis for SharePoint, Kenna risk management product and Symantec DLP. Create firewall baseline and standards through reviews of firewall environments including access control lists and management access controls. Create remediation documents for Infrastructure Network team to align firewall environment with requirements. Lead Infrastructure – Information Security status on multiple occasions to fill in for Information Security Manager. Offer guidance to Network Infrastructure team for remediation of penetration testing results. Create hardening guidelines for ASA firewalls and Cisco routers

Information Systems Engineer. Support of Server and Application Environment.