Leading Product Security risk analysis, mitigation and management. Balances security risk with business priorities while enabling business strategy. CEO report outs w/ policy, risk mitigation and strategic metricsDriving new technology selection/evaluation and product security development programs.Created system architecture specification and design for critical infrastructure applications.Process: Sec DevOps, developed and implemented security policy and procedures, compliance and training. Commercial: Leads RFP technical review, analysis and risk reduction, cyber supply chain management and contract negotiations (Cyber)Incident Response: Coordination with DHS, CIRTs, other government agencies, cyber security researchers, legal, PR and leadershipTechnical: Specializations in OT cyber security, threat modeling, risk analysis and mitigation, trusted computing, key management, static and dynamic code analysis, penetration testing, EDGE and Cloud integration, OT IDS, DCS, embedded platform development.Subject matter expert NERC CIP compliance, IEC62443 and secure OT networking.People: Mentorship, technical skills development and coaching, performance evaluation and staffingCore competencies:SDLC and DevSecOps for OT; process development, compliance certification (IEC 62443 4-1, 2-4) and governanceSecurity Architecture Development - Review and ApprovalIncident Response and Recovery SupportEmbedded Controls development and Security Threat Modeling, Pen testing, Risk Analysis and Mitigation (Embedded to Cloud - IoT)Product strategy and commercialization for cyber security Cyber Security Compliance and Certification (IEC 27001/2, NIST 800-*, NERC CIP, IEC 62443)Domain Expertise: Power Generation (hydro, wind, gas turbine), Pharma, Food & Beverage, Steel, HVDC transmission/conversion

Creator of GE network reference architecture for GE Power ICS. Product owner, architect and agile development leader for next gen ICS cyber Security Management System for heavy gas turbine applications. Generated $25MM in direct sales and product pull through.Solution design, productization, deployment and optimization of Edge\Enterprise Security for Industrial Control Systems.Thought leader in Product lifecycle management and new technology introduction. Security policy specification, layer 3-7, IDS, IPS, DPI, DLP, QoS and SIEM integration.

Remote monitoring and diagnostics -developed architecture and design for monitoring and diagnostics center including deployment and startup. Devised secure high speed methods for collection, aggregation and analysis of process data derived from high value assets- gas turbines, steam turbines and locomotives

GE/CISCO Systems joint venture Architect: Created network reference design for GE power generation ICS for turbine control. Design and implementation oversight for GE Power Remote Monitoring and Diagnostics center upgrade from analog to digital WAN communications technologies. System supports multi billion dollar service contract backlog.

Business case development and executive sponsorship. Secured $430k in cap ex funding and management support to proceed with data center design, network infrastructure procurement, deployment and wan provisioning to end user ICS. Field support - ICS maintenance and support

ICS system design, application engineering, team coaching, scheduling, development activities for GE ICS automation projects for large metals manufacturing applications. Author and administer test plans from unit test through full system and factory acceptance. Development and execution of high fidelity simulation systems for customer training and final validation.