Tom Flick, Cissp, Ccsp Email & Phone Number

St. Louis, MO, US

Westlake, Texas, US

Omaha, NE, US

• Product owner for global cloud security program.
• Lead Security Architect for IaaS, PaaS, and SaaS cloud service models.
• Directed the selection, deployment, and maturity of CASB, CSPM, and CWPP solutions.
• Designed a streamlined risk assessment process for evaluating new SaaS vendors.

St. Louis, Missouri, US

• Lead Security Architect for global cloud security program.
• Designed secure architecture patterns for AWS and Azure.
• Directed CASB product selection and solution deployment.
• Published security policies and standards for global organization.
• Technology partner to integrate security testing into Agile and DevOps work flows.

St. Louis, MO, US

• Delivered a scalable and accurate application security solution (DAST) for major lines of business.
• Provided security architecture guidance and expertise for major IT initiatives.
• Performed security risk assessments on key corporate mergers and acquisitions.
• Developed global security policies, standards, and guidelines.

St. Louis, MO, US

• People leader over a vulnerability and threat management team.
• Responsible for vulnerability management, IDS/IPS, ADS, SIEM, & incident response services.
• Deployed Qualys vulnerability scanning to over 18,000 servers and network devices.
• Launched EnCase Enterprise & eDiscovery platform for U.S. and European regions.
• Pioneered a new risk management platform resulting in improved risk metrics for senior leadership.

St. Louis, MO, US

• Managed a team focused on risk management, vulnerability analysis, and incident response.
• Led the Computer Security Incident Response Team (CSIRT).
• Increased employee awareness for the incident response process by over 200%.
• Designed and delivered IT wide vulnerability management & risk management processes.
• Developed a pen-testing program and completed the first internal pen-test at Enterprise Rent-A-Car.

St. Louis, MO, US

• Pioneered the development and deployment of the first IT-wide risk management process.
• Created a repeatable risk scoring model and risk registry for tracking and reporting IT risk.
• Designed a pen-testing process & successfully led first internal pen-test for the company.
• Awarded the “Enterprise Outstanding Achievement Award” earned only by the top 5% of all IT employees for making a significant and lasting contributions to the company.

St. Louis, MO, US

• Responsible for daily malware analysis & anti-malware controls.
• Correlated host-based and network-based IDS/IPS systems and resolved generated alerts.
• Delivered a “Monthly Malware & Spam Report” for senior IT management.
• Coordinated the Security Incident Response Team (SIRT).
• Developed a repeatable security assessment process for major IT projects.

Woburn, Massachusetts, US

• Functioned as Director of Membership and Corporate Sponsorship.
• Developed the chapter Corporate Sponsorship Program to improve member benefits.
• Designed and developed a new web site for the ISSA St. Louis Chapter.

Saint Louis, Missouri, US

Grand Junction, CO, US

• Provided a customer-focused approach to network and server administration.
• Implemented a remote support solution that enhanced productivity by 45%.

Randolph AFB, TX, US