Timothy Shea Email & Phone Number

San Diego, Ca, Us

San Mateo, California, Us

San Mateo, California, Us

Founded and managed the Platform Cloud Security Engineering Team that built AWS IAM automation, delivered on proactive remediation, took over AWS Organizational management and delivered on AWS account hardening for 100s of AWS accounts.Principal Cloud Security Architect for all of Platform and Services with a focus securing:- AWS- IAM- Kubernetes - Supply Chain- PerimeterPlatform Security Representative for PS5 Launch

San Mateo, California, Us

Principal Security Engineer/Architect working with the San Francisco based engineering teams with a focus on securing:- Kubernetes- AWS- DataLake/DataOcean

San Mateo, California, Us

Designed and built initial security controls for applications supporting the launch of the PlayStation 4 including engineering new web application infrastructure, developing hardening standards for applications hosted in AWS and improved security logging and monitoring.Delivered on comprehensive anti-DDOS measures resulting in the first Christmas season (2015) in three years with no downtime due to DDOS attacks. Design and implemented tokenization solutions to minimize PCI footprint.Delivered Security Reference Architectures to set technical standards on how security controls and monitoring are to be implemented Amazon Web Services. Reviewed and replaced legacy security tools to streamline delivery of controls within AWS hosted application stacks (e.g. secrets management, web application firewalls, security group management, etc).First member of Security Team to engage infrastructure teams in Sony Tokyo Head Office. This resulted in significant changes to security posture that resulted in improved stability and risk reduction. Delivered on segmenting of the internal corporate networks by implementing NGFW and IPS products improving visibility and control over internal networks and implementation of new malware monitoring infrastructure.Member of the Senior Leadership team for the Security Office and various Architecture boards.

San Mateo, California, Us

As manager of the Security Engineering team my primary role was to staff the team and mature processes and tools. This included evaluation of team members, goal development, evaluation of technologies available to the team, and setting direction. Tools that the team managed were Sourcefire IPS, Tipping Point IPS, Juniper SRX, ArcSight, Hedgehog, Tripwire, Qualys, Archer, Red Seal, Marlin DRM, and several others.

Eagan, Mn, Us

As Enterprise Security Architect I was responsible for portfolio management of security technologies, analysis of new projects and adherence to agreed upon architectures and standards, information security strategy from a technical perspective, and new technology analysis and adoption. Specific projects included but not limited to redesign of campus wireless network with the implementation of NAC (Juniper NAC with Cisco APs), evaluation and implementation of security controls for data warehouse, replacement of two factor authentication solution, implementations of DLP and web content filtering solutions, redesign of DMZs and selection of new firewall and IPS technology (Checkpoint), and the evaluation and implementation of tokenization for database and data warehouse applications (Protegrity).In this role I was part of the leadership team and reported directly to the CISO.

Eagan, Mn, Us

As Interim Manager of the Threat and Vulnerability Management team my primary role was to rebuild the team after months of being without a manager and to assist in hiring a permanent manager. This included evaluation of team members, goal development, evaluation of technologies available to the team, and setting direction. After hiring of a permanent manager I took up the role as Architect for the Security team. Tools that the team managed were Sourcefire IPS, Cisco PIX/ASA firewalls, ArcSight, LogRhythm, PointSec (Checkpoint) Encryption, Sophos Anti-Virus, and Qualys.

Minnetonka, Minnesota, Us

I was brought in to assist with the "re-insourcing" of security operations components such as IDS and logging from an external vendor and the re-design of security architecture for Carlson Hotels. Rebuilt and upgraded the IDS and logging environments and took over the management of the external Security Operations Center.Primary contact for PCI and Government audits for intrusion detection and logging for all Carlson owned businesses (with the exception of CRW).

Denver, Co, Us

As a technology consultant my focus was on remote access solutions, DMZ design, and firewall design for a variety of Accuvant customers in the Government and Manufacturing sectors.

Migrated remaining application proxy firewalls to Cisco PIX and ASA. Implemented SSL remote access solutions. Provided general DMZ architecture advice..

Toronto, Ontario, Ca

As part of a major system transition RBC Dain Rauser required a solution to eliminate redundant authentication challenges and identity management for web based applications critical to the Dain Correspondents System business line. Evaluated solutions and rolled out Siteminder to a dozen web servers. Worked closely with networking, systems, and applications teams to identify system incompatibilities and resolve them. On the front lines during conversion and was required to rapidly identify and correct issues as they arose to limit Broker downtime. After implementation - potential authentication challenges went from 9 to 3 with an improvement in security of the request and performance. Implemented reverse proxy servers to allow for broker access to newly rolled out applications. This also required integration with Siteminder and the design, hardening, and testing of reverse proxy solution with application teams.Provided additional security consulting to various groups on a number of different topics including DMZ design, authentication, and application design.

Marlborough, Ma, Us

Provide technical direction to the Guidant Asset Protection team including DMZ design, internal network segmentation, and solving internal challenges such as securing file transfers and encryption. Implemented perimeter content filtering. Greatly limited the impact of malware breakouts and pursued strategies to improve manufacturing availability by researching and recommending approaches to limit their exposure. Projects cut short by the Boston Scientific and Abbott Labs merger with Guidant.Performed internal network and wireless assessments. Developed scanning and other auditing tools to ensure active compliance to security policy. Member of the emerging threats and disaster recovery teams.

Marlborough, Ma, Us

As a contractor I worked closely with network and security teams of Guidant and Johnson and Johnson to align Guidant's perimeter architecture with Johnson and Johnson standards. Was offered a permanent position as Architect after three months.

Eagan, Mn, Us

As a contractor provided immediate support for firewall and IDS environment while BCBS restaffed security technical positions. Later designed and implement perimeter DMZs in a new disaster recovery facility. Managed firewall conversions from proxy based firewalls to Cisco PIX.

Minneapolis, Mn, Us

Security Engineer for perimeter applications that were being migrated to new perimeter architecture and for applications with high availability requirements.

San Francisco, California, Us

I was originally brought in as a Design Engineer for Security Access Engineering to evaluate and create security designs for various Wells Business Units. This included designs for extranets, VPNs, remote access, call centers, and firewall designs. I designed and implemented proof of concept solutions for secure storage of designs and vendor remote access. Later as a founding member of the Security Perimeter Architecture team redesigned internal DMZ architecture to lower the cost and improve implementation times for the rollout of internal DMZs. Performed testing of new firewall technologies for Wells Fargo perimeter and tested and rolled out management and logging solutions for security managed devices. Mentored less experienced engineers in processes and procedures. Subject Matter Expert for securing 'difficult' applications.Performed host, application, and network scanning and pen testing.

Us

As one of the first wave of employees hired after the second closing round I had the responsibility to take over, support and grow an infrastructure to support a rapidly growing software company. Installed and supported IRIX, Solaris, AIX, HPUX, Windows, Cisco, Watchguard, Checkpoint, Exchange, etc. Hired and managed first desktop and server administrators. Coordinated the build out of network infrastructure during numerous office moves ultimately supporting a company of 450 employees in NYC, Minneapolis, San Francisco, Austin, Dallas, London, Tokyo, and Amsterdam. Managed WAN and Internet connectivity. Ultimately responsible for security of the network and offices.