Lead Product Management, Cybersecurity Innovation and Customer Success for Frenos platform, an AI native solution utilizing a digital twin to perform autonomous security assessments, prioritization and mitigation support for OT environments.

I’ve been delivering security consulting services as Locus Security since 2010 including penetration testing, security architecture assessments, security engineering projects, software supply chain, counterfeit investigations and other services.

Authored SEC547 Defending Product Supply Chains, and teach a few runs each year. Get in touch for info on the next scheduled session or register at https://www.sans.org/cyber-security-courses/defending-product-supply-chains/

Founder of Opswright, a new type of cybersecurity company disrupting security engineering for critical infrastructure.

Founded and lead the Fortress Labs team, responsible for emerging supply chain security research and innovative solutions development. Security Architect for Security Solutions design and relevant Fortress security products. Product owner for Vulnerability Risk Management, Product Security, SBOM, HBOM, Threat and OT Security offerings, and Advisory. Frequent speaker at industry events and evangelist for Threat and Vulnerability Management for IT and OT environments. Responsible for Technology Partnerships and associated cyber security solutions.

Primary Security Architect for Security Solutions design and relevant Fortress security products. Business owner for Vulnerability Risk Management, Product Security, SBOM, HBOM, Threat and OT Security offerings, Managed Services and Advisory. Frequent speaker at industry events and evangelist for Threat and Vulnerability Management for IT and OT environments. Responsible for Technology Partnerships and associated cyber security solutions.

Manage Sales Engineering for a combined offering of product and services focused on Third Party Vendor Risk, Vulnerability Management and Operational Technology (OT) Security. Function as primary Security Architect for Customer Security Solutions design. Product Manager - Ensures product and services roadmap are aligned with customer needs and current and relevant information security problem space. Support ongoing creation and maturation of Pre-Sales and Professional Services delivery processes and collateral. Technical content owner.

Manage Professional Services (PS) team in support of the Skybox Security product suite for customer deployments. Support professional services processes and internal and external communications for PS delivery efforts. Proposal development and scoping for PS engagements. Delivery of PS projects.

Global responsibility for application security program at Arrow, reporting to Global CISO. SDLC, software assurance maturity models and Appsec requirements, policies and procedure development. Application and project specific risk assessment and advisory. Mentor application penetration testing and vulnerability management teams. Strategic focus for security architecture initiatives. Function as BISO for all security architecture needs with dotted line to Digital and AVR/STS Division CIOs.

Developing chapter

Founded and ran non-profit organization to support annual Security B-Sides Orlando conference. If you are interested in supporting our efforts in building an information security community in Central Florida or want to learn more please get in touch or visit http://bsidesorlando.org

Developed and run the Application Delivery practice which includes architecture and design for traditional, cloud and hybrid architectures, implementation and optimization services for Application Delivery Controllers, Web Application Firewalls, DDoS and supporting technologies such as DNS and TLS. Created and Managed F5 Guardian services for GuidePoint. Engaged in offering and practice development, practice evangelism, presales, delivery and postsales efforts. Additional security consulting for a wide array of information security areas including penetration testing, vulnerability management, cloud security (AWS and Azure), data protection, incident response, security operations and management related issues.

Manage cross-functional technical team including Security Operations and Engineering, Incident Response, Active Directory, Windows servers, Web Application Infrastructure, Single Sign-On (SSO), Scripting Automation, Compliance, E-Discovery and other advanced issues as escalated to team.Responsible for coordinating high profile project activities for team, conducting research on emerging security issues, engaging in security testing and remediation activities and providing overall direction to enhance Darden's security posture.

IT Security Consulting, Information Security Policy Development, Compliance Analysis & Remediation, Security and Compliance Project Management (PCI DSS Lead), Security Monitoring, CSIRT Manager, Penetration Testing, Vulnerability Assessment, IS Audit Coordination, Business Continuity Leadership and other Technology Risk related duties.

Part time OPS grant funded position assisting Brevard County Health Department staff with ongoing technology initiatives including wireless and systems configuration design. Function in a research and advisory role. Grant funds expired March 31, 2011

Responsible for the IT security and compliance of 10 county-level IT departments supporting approximately 2000 users for the Florida Department of Health. Responsible for the creation of agency disaster preparedness and assisting with Business Impact Analysis plans for all state health agencies within his 10 county region. Assess IT related security risks annually and provide ongoing mitigatory solutions. Conduct in-depth information security assessments for health departments in 9 counties outside of regional responsibilities. Developed several security testing processes for team.Responsible for Incident Response including Hurricane Response for emergency communications utilizing mobile satellite connectivity, alternate data recovery techniques, and secured wireless, wireless site audits, virus mitigation strategies. Functions as agency's (18,500 machines) enterprise antivirus administrator