ScaleSec is a security-first consultancy that helps customers create or enhance cloud programs through security strategy, architecture, hands-on implementation, automation, and integration services. ScaleSec supports financial services, retail, technology, and healthcare. ScaleSec is a trusted security advisor for Capital One, Genuine Parts Company, VMware, Dexcom, AttackIQ, Pacific Life Insurance Company, Dawn Foods, and many more.Notable accomplishments include:• Co-founded a boutique consulting firm to provide deep expertise in cloud-based security and compliance• Grew revenues every year, resulting in a 138% CAGR since launch• Led cloud security and compliance initiatives for dozens of customers, establishing long-term relationships with over 80% of revenue from repeat customers• Built strategic partner relationships with AWS and Google Cloud, achieving coveted security specializations• Scaled a remote workforce of highly specialized consultants distributed across the United States• Launched a publication marketing program to establish industry leadership in cloud security and compliance through presentations, blogs, webinars, panel discussions• Designed and constructed modular professional services engagement frameworks for streamlined, repeatable business• Established and managed contracts, finance, and internal technology functionsIn addition to managing the business I lead select engagements. Key areas of technical expertise include:• Security program management• FedRAMP, SOC 2, HIPAA, and ISO 27001 compliance• Cloud governance and policy management• Cloud security controls design and automation• Security event analysis and log management

Provided guidance and implementation services to facilitate enterprise customers' transition to the cloud, following AWS security best practices and seizing opportunities to raise the bar for securing sensitive workloads. Led multiple cloud security engagements including workshops, strategies, playbook development, and security automation for Fortune 500 companies in banking, pharmaceutical, financial services, retail, managed services, health informatics, insurance, and electronics industries.Notable accomplishments include:• Resident security architect for Intuit, providing full-scope cloud security consultation and implementation assistance• Delivered security presentations at the AWS re:Invent conference and the AWS Pop-Up Loft• Led design and engineering for environment supporting The Forrester Wave: Public Cloud Platform Service Providers’ Security• Design consultant to AWS internal teams for new security-related services and features, including AWS CloudTrail and VPC Flow Logs• Provided consultation and automation assistance to AWS Technology Partners including Imperva, Alert Logic, Trend Micro, and Evident.io.• Curriculum creator and instructor for AWS Premier Consulting Partners bootcamp• Curriculum creator for Systems Operations on AWS training course• Author, co-author, and contributor to numerous white papers, blogs, and articles

Reported to the CTO and VP for Worldwide R&D, HP Enterprise Security as a global security strategist and subject matter expert engaging with countries, government agencies, and large enterprises take a fresh, pragmatic approach to their security programs. Unified HP security offerings through use of virtual teaming and flexible business frameworks to build solutions from market-leading products and services.Notable accomplishments include:• The HP Cyber Security Ecosystem - conceptually summarized as "the picture on the puzzle box”, providing security leaders with a strategic blueprint and roadmap to build or improve enterprise security programs. This unique approach ties assets and daily operations to the enterprise mission, goals, and objectives, and facilitates external standards, regulations and security threat intelligence.• The HP Security Reference Architecture (SRA) - a component of the HP Cyber Security Ecosystem that helped clients extract full value from their investments by revealing the dependencies and interrelationships of underlying technology components.• Use cases and content integration packages for ArcSight ESM and ArcSight Express - teamed with customers and partners to lead the co-development, testing, documentation and delivery of requirement-driven integrations with third party security products including FireEye's nPulse Hammerhead and AlertEnterprise.

Assistant Vice President, Chief Technology Officer and Special Operations Manager for SAIC's Security Operations Practice based in San Diego, CA. Strategy leader and lead architect for all infrastructure efforts for operations and expansion of service offerings and go-to subject matter expert (SME) for customer information security challenges. Notable accomplishments include: • Designed and led development for integrated report data delivery system which replaced dozens of monthly personnel hours with an automated solution, and decreased data latency from 40 days to one hour. This integration was based on ArcSight ESM, the Archer SmartSuite eGRC Framework and leveraged customized Oracle and Microsoft SQL databases. • Designed, procured and deployed geographically diverse business continuity infrastructures with active/active event management and monitoring capabilities, further bolstering SAIC's qualifications and credibility as a robust service provider • Conceived and led implementation of tiered analyst triage structure, processes and policies, enabling a modular and measurable workflow • Working with upper management, designed and marketed key service offerings and developed a cost accounting algorithm used to price services • Designed and managed engineering of air-gapped government-only networks for federal clients • Led initiative to analyze, score, procure, deploy, integrate and tune the ArcSight ESM security information event management (SIEM) platform to consolidate disparate log management consoles and tools • Designed, implemented, and supported an enterprise security solution to facilitate workflow between San Diego County (400 sites/16,000 users) and its external constituents in what was referred to by the press as “the largest outsourcing deal ever signed by a local government agency in the United States” at $644M